Android Factory Reset Trigger Vulnerability in Settings App
Vulnerability
A logic error in the onClick method of MainClear.java in the Android Settings application creates a vulnerability that allows a factory reset to be triggered without explicit user consent. This issue could lead to a local denial-of-service condition, as it requires no additional execution privileges and does not involve user interaction for exploitation.
Impact
Exploitation of this vulnerability causes a local denial-of-service condition by triggering a factory reset, which can disrupt device functionality and lead to data loss.
Remediation
Users can update their devices to the January 2025 security patch level to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
