Android Companion Device Manager Service Elevation of Privilege Vulnerability

A vulnerability has been identified in the CompanionDeviceManagerService.java file, where certain functions may improperly grant permissions without user consent. This issue arises from a lack of necessary permission checks, potentially allowing for local elevation of privilege. Exploitation of this vulnerability does not require any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized permission grants, allowing users to escalate privileges on the device.

Remediation

Users can update their devices to the January 2025 security patch level to address this vulnerability.