CVE-2024-31320 — In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This could lead to local escalation of privilege — CVE Database · The Intelligence Room