CVE-2024-31320

In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

• CWE-269
• CWE-284

• https://android.googlesource.com/platform/frameworks/base/+/9722ce9d733edab76163fbcd21b231424e3d7061Mailing List, Patch
• https://android.googlesource.com/platform/frameworks/base/+/df49e0e3083b0707e2cca5a5956b49f14ded078eMailing List, Patch
• https://source.android.com/security/bulletin/2024-07-01Patch, Vendor Advisory
• https://android.googlesource.com/platform/frameworks/base/+/9722ce9d733edab76163fbcd21b231424e3d7061Mailing List, Patch
• https://android.googlesource.com/platform/frameworks/base/+/df49e0e3083b0707e2cca5a5956b49f14ded078eMailing List, Patch
• https://source.android.com/security/bulletin/2024-07-01Patch, Vendor Advisory

Published

Jul 9, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31314In multiple functions of ShortcutService.java, there is a po…5.5
• CVE-2024-31315In multiple functions of ManagedServices.java, there is a po…7.8
• CVE-2024-31316In onResult of AccountManagerService.java, there is a possib…7.8
• CVE-2024-31317In multiple functions of ZygoteProcess.java, there is a poss…7.8
• CVE-2024-31318In CompanionDeviceManagerService.java, there is a possible w…7.8
• CVE-2024-31319In updateNotificationChannelFromPrivilegedListener of Notifi…7.8
• CVE-2024-31322In updateServicesLocked of AccessibilityManagerService.java,…7.8
• CVE-2024-31323In onCreate of multiple files, there is a possible way to tr…7.8
• CVE-2024-31324In hide of WindowState.java, there is a possible way to bypa…7.3
• CVE-2024-31325In multiple locations, there is a possible way to reveal ima…7.8
• CVE-2024-31326In multiple locations, there is a possible way in which poli…7.8
• CVE-2024-31327In multiple functions of MessageQueueBase.h, there is a poss…7