CVE-2024-31331

In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

• CWE-783

• https://android.googlesource.com/platform/frameworks/base/+/c8694bbccfb9c19aefed536ea710230107c935ebMailing List, Patch
• https://source.android.com/security/bulletin/2024-07-01Patch, Vendor Advisory
• https://android.googlesource.com/platform/frameworks/base/+/c8694bbccfb9c19aefed536ea710230107c935ebMailing List, Patch
• https://source.android.com/security/bulletin/2024-07-01Patch, Vendor Advisory

Published

Jul 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31324In hide of WindowState.java, there is a possible way to bypa…7.3
• CVE-2024-31325In multiple locations, there is a possible way to reveal ima…7.8
• CVE-2024-31326In multiple locations, there is a possible way in which poli…7.8
• CVE-2024-31327In multiple functions of MessageQueueBase.h, there is a poss…7
• CVE-2024-31328In broadcastIntentLockedTraced of BroadcastController.java, …8.8
• CVE-2024-3133Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-31332In multiple locations, there is a possible way to bypass a r…7.8
• CVE-2024-31333In _MMU_AllocLevel of mmu_common.c, there is a possible arbi…7.8
• CVE-2024-31334In DevmemIntFreeDefBackingPage of devicemem_server.c, there …7.8
• CVE-2024-31335In DevmemIntChangeSparse2 of devicemem_server.c, there is a …7.8
• CVE-2024-31336In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, ther…7.8
• CVE-2024-31337In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arb…7.8