CVE-2024-31322

In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the Setting while retaining Accessibility Service due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

• CWE-269

• https://android.googlesource.com/platform/frameworks/base/+/c1bc907a649addd5b97d489fd39afb956164a46cMailing List, Patch
• https://source.android.com/security/bulletin/2024-06-01Patch, Vendor Advisory
• https://android.googlesource.com/platform/frameworks/base/+/c1bc907a649addd5b97d489fd39afb956164a46cMailing List, Patch
• https://source.android.com/security/bulletin/2024-06-01Patch, Vendor Advisory

Published

Jul 9, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31315In multiple functions of ManagedServices.java, there is a po…7.8
• CVE-2024-31316In onResult of AccountManagerService.java, there is a possib…7.8
• CVE-2024-31317In multiple functions of ZygoteProcess.java, there is a poss…7.8
• CVE-2024-31318In CompanionDeviceManagerService.java, there is a possible w…7.8
• CVE-2024-31319In updateNotificationChannelFromPrivilegedListener of Notifi…7.8
• CVE-2024-31320In setSkipPrompt of AssociationRequest.java , there is a pos…7.8
• CVE-2024-31323In onCreate of multiple files, there is a possible way to tr…7.8
• CVE-2024-31324In hide of WindowState.java, there is a possible way to bypa…7.3
• CVE-2024-31325In multiple locations, there is a possible way to reveal ima…7.8
• CVE-2024-31326In multiple locations, there is a possible way in which poli…7.8
• CVE-2024-31327In multiple functions of MessageQueueBase.h, there is a poss…7
• CVE-2024-31328In broadcastIntentLockedTraced of BroadcastController.java, …8.8