CVE-2024-40655: Open Source Vulnerability in platform/packages/services/Telecomm
Summary
CVE-2024-40655: In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. Affects platform/packages/services/Telecomm across 5 version ranges.
>= 12:0, < 12:2024-09-01
>= 12L:0, < 12L:2024-09-01
>= 13:0, < 13:2024-09-01
>= 14:0, < 14:2024-09-01
>= 15-next:0, < 15-next:2024-09-01
Fixed in 15-next:2024-09-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/packages/services/Telecomm, which is a part of the Android ecosystem. This package is responsible for providing telecommunication services on Android devices. It includes features such as call screening, call identification, and call management. The vulnerability in this package allows an app to maintain a while-in-use permission in the background, even if it is not actively being used. This vulnerability can be exploited to escalate privileges locally without requiring additional execution privileges. However, user interaction is necessary for the exploitation of this vulnerability.
Vulnerability Detail
The vulnerability, identified as CVE-2024-40655, originates from a permissions bypass in the bindAndGetCallIdentification function of CallScreeningServiceHelper.java. This function allows an app to bypass the necessary checks and retain while-in-use permission even when it is running in the background. This vulnerability can be exploited to escalate privileges locally, potentially leading to unauthorized access or control of sensitive information. The vulnerability has been assigned a severity level of High. The affected versions of the package range from 15-next:0 to 15-next:2024-09-01. The vulnerability has been fixed in the version 15-next:2024-09-01 of the package.
How To Fix
Minimum fixed version
15-next:2024-09-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The platform/packages/services/Telecomm package in the Android ecosystem is vulnerable to a permissions bypass issue that allows an app to maintain while-in-use permission in the background. This vulnerability can be exploited to escalate privileges locally, potentially leading to unauthorized access or control of sensitive information. It is crucial to update the package to the fixed version 15-next:2024-09-01 to mitigate the risk of privilege escalation.
See every vulnerability recorded for platform/packages/services/Telecomm →
FAQ
This vulnerability allows an app to maintain while-in-use permission in the background, potentially leading to local privilege escalation. It can be exploited to gain unauthorized access or control over sensitive information.
Yes, user interaction is necessary for the exploitation of this vulnerability.
The affected versions of the package range from 15-next:0 to 15-next:2024-09-01.
Yes, the vulnerability has been fixed in the version 15-next:2024-09-01 of the package.
The vulnerability has been assigned a severity level of High.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/services/Telecomm.
