CVE-2024-43088: High severity android vulnerability
In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the device due to a missing permission check. This could lead to local escalation of privilege across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43088?
CVE-2024-43088 is classified as a local escalation of privilege vulnerability.
How do I fix CVE-2024-43088?
To address CVE-2024-43088, update your Android device to the latest version provided by Google.
Which versions of Android are affected by CVE-2024-43088?
CVE-2024-43088 affects Android versions 12.0, 12.1, 13.0, 14.0, and 15.0.
What is the impact of CVE-2024-43088?
The impact of CVE-2024-43088 includes potential manipulation of app permission settings across user boundaries.
Is user interaction required to exploit CVE-2024-43088?
No, CVE-2024-43088 can be exploited without any additional execution privileges or user interaction.