CVE-2024-43087: High severity android vulnerability
In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in the accessibility service settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43087?
CVE-2024-43087 has been classified as a local escalation of privilege vulnerability.
How do I fix CVE-2024-43087?
To mitigate CVE-2024-43087, update your Android device to a version that includes the relevant security patches.
What versions of Android are affected by CVE-2024-43087?
CVE-2024-43087 affects Android versions 12.0, 12.1, 13.0, 14.0, and 15.0.
What causes CVE-2024-43087?
CVE-2024-43087 is caused by a logic error in the getInstalledAccessibilityPreferences function of AccessibilitySettings.java.
Can CVE-2024-43087 be exploited remotely?
CVE-2024-43087 requires local access to the device, making it a local privilege escalation vulnerability.