Skip to content
OpenAdvisories
High · 7.8 CVE-2024-49732 EUVD-2024-43698GHSA-fcgm-cf56-frhw

In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a mis…

Published Jan 21, 2025 · Updated Mar 13, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 15 —

Advisories 3

References