CVE-2024-40650: Android 13 Factory Reset Protection (FRP) Bypass in Settings App
Summary
CVE-2024-40650: In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. Affects platform/packages/apps/Settings across 5 version ranges.
>= 12:0, < 12:2024-09-01
>= 12L:0, < 12L:2024-09-01
>= 13:0, < 13:2024-09-01
>= 14:0, < 14:2024-09-01
>= 15-next:0, < 15-next:2024-09-01
Fixed in 15-next:2024-09-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Android Settings app is a system application that allows users to manage various settings on their Android devices. It provides access to Wi-Fi settings, display settings, app permissions, and more. The app is an integral part of the Android operating system and is pre-installed on all Android devices. However, a vulnerability in the app's Wi-Fi settings feature allows for a bypass of the Factory Reset Protection (FRP) security mechanism.
Vulnerability Detail
The vulnerability (CVE-2024-40650) exists in the wifi_item_edit_content of styles.xml in the Android Settings app. It is caused by a missing check for the FRP state, which can be exploited to bypass the FRP protection. This bypass can lead to a local escalation of privilege without requiring any additional execution privileges. The vulnerability does not require user interaction for exploitation, making it a significant security concern.
How To Fix
Minimum fixed version
15-next:2024-09-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update the Android Settings app to the latest version to address the issue effectively.
Conclusion
The Android Settings app is vulnerable to a bypass of the Factory Reset Protection (FRP) security mechanism. This vulnerability can lead to a local escalation of privilege without requiring any additional execution privileges. It is crucial for users to update their Android devices to the latest software version to mitigate the risk of this vulnerability.
See every vulnerability recorded for platform/packages/apps/Settings →
FAQ
The Android Settings app is a system application that allows users to manage various settings on their Android devices, such as Wi-Fi, display, and app permissions.
Factory Reset Protection (FRP) is a security feature in Android devices that prevents unauthorized access to a device after a factory reset. It requires the user to enter the Google account credentials associated with the device.
The vulnerability allows for a bypass of the Factory Reset Protection (FRP) security mechanism, potentially enabling unauthorized access to a device after a factory reset.
No, user interaction is not required for exploiting this vulnerability. An attacker can exploit the vulnerability without any user involvement.
Yes, a fix for this vulnerability has been released in version 15-next of the Android Settings app, which was made available on September 1, 2024.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/apps/Settings.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
