Android Package Manager Service CloudDpc Uninstallation Privilege Escalation Vulnerability

A logic error in the PackageManagerService's isPackageDeviceAdmin function can cause an edge case that prevents the uninstallation of CloudDpc. This issue allows for local privilege escalation without requiring additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.

Remediation

Users can update their devices to the December 2024 security patch level to address this vulnerability.