CVE-2024-32896: Device administration API factory reset can be interrupted by an attacker with physical access (long-term fix)
Summary
CVE-2024-32896: In rebootRecoveryWithCommand of RecoverySystemService.java, there is a possible way to bypass a factory reset due to a logic error in the code. Affects platform/build/soong versions >= 15-next:0, < 15-next:2024-09-01. Fixed in 15-next:2024-09-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/build/soong, which is part of the Android ecosystem. It is responsible for building Android apps and system images. The vulnerability affects the device administration API factory reset functionality, which allows users to reset their devices to factory settings. This vulnerability can be exploited by an attacker with physical access to the device.
Vulnerability Detail
The vulnerability exists in the rebootRecoveryWithCommand function of RecoverySystemService.java. Due to a logic error in the code, it is possible to bypass the factory reset, leading to a local escalation of privilege. The attacker does not require additional execution privileges and user interaction is needed for exploitation. The impact of this vulnerability is that an attacker with physical access to the device can prevent a factory reset, potentially gaining unauthorized access to the device and its data.
How To Fix
Minimum fixed version
15-next:2024-09-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the vulnerability in the device administration API factory reset functionality can be exploited by an attacker with physical access to the device. It is recommended to update the platform/build/soong package to the fixed version to mitigate this vulnerability.
See every vulnerability recorded for platform/build/soong →
FAQ
The impact of this vulnerability is that an attacker with physical access to the device can prevent a factory reset, potentially gaining unauthorized access to the device and its data.
Yes, user interaction is needed for exploitation of this vulnerability.
The severity of this vulnerability is classified as High.
No, no additional execution privileges are needed for exploitation of this vulnerability.
The long-term fix for this vulnerability is to update the platform/build/soong package to the fixed version 15-next:2024-09-01.
Related vulnerabilities
Recent vulnerabilities recorded for platform/build/soong.
