CVE-2024-43769
Published: 03 January 2025
Description
In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Security Summary
CVE-2024-43769 is a logic error in the isPackageDeviceAdmin function of PackageManagerService.java within the Android Open Source Project's frameworks/base component. This vulnerability introduces an edge case that prevents the uninstallation of the CloudDpc package, enabling local escalation of privilege. No additional execution privileges or user interaction are required for exploitation, with a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and association to CWE-276 (Incorrect Default Permissions).
A local attacker with low privileges can exploit this issue by triggering the specific edge case in the package administration logic. Successful exploitation prevents the removal of CloudDpc, allowing the attacker to achieve privilege escalation with high impacts on confidentiality, integrity, and availability.
The Android Security Bulletin for December 2024 documents this vulnerability, recommending updates to affected devices. A fix is available in the Android source code via commit 619ffc299bf33566ba6daee8301ee0fc96e015f4.
Details
- CWE(s)