CVE-2024-31326

In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

• CWE-783

• https://android.googlesource.com/platform/frameworks/base/+/736462a777d0a0e1258bd7ab80d6e352ef797669Mailing List, Patch
• https://android.googlesource.com/platform/frameworks/base/+/f1eb8e719dfbe15a38d40af0a73ead207eba9389Mailing List, Patch
• https://source.android.com/security/bulletin/2024-06-01Patch, Vendor Advisory
• https://android.googlesource.com/platform/frameworks/base/+/736462a777d0a0e1258bd7ab80d6e352ef797669Mailing List, Patch
• https://android.googlesource.com/platform/frameworks/base/+/f1eb8e719dfbe15a38d40af0a73ead207eba9389Mailing List, Patch
• https://source.android.com/security/bulletin/2024-06-01Patch, Vendor Advisory

Published

Jul 9, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31319In updateNotificationChannelFromPrivilegedListener of Notifi…7.8
• CVE-2024-31320In setSkipPrompt of AssociationRequest.java , there is a pos…7.8
• CVE-2024-31322In updateServicesLocked of AccessibilityManagerService.java,…7.8
• CVE-2024-31323In onCreate of multiple files, there is a possible way to tr…7.8
• CVE-2024-31324In hide of WindowState.java, there is a possible way to bypa…7.3
• CVE-2024-31325In multiple locations, there is a possible way to reveal ima…7.8
• CVE-2024-31327In multiple functions of MessageQueueBase.h, there is a poss…7
• CVE-2024-31328In broadcastIntentLockedTraced of BroadcastController.java, …8.8
• CVE-2024-3133Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-31331In setMimeGroup of PackageManagerService.java, there is a po…7.3
• CVE-2024-31332In multiple locations, there is a possible way to bypass a r…7.8
• CVE-2024-31333In _MMU_AllocLevel of mmu_common.c, there is a possible arbi…7.8