exploitDog

GHSA-3m49-jmr4-jpx2

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138650665

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138650665

Ссылки

EPSS

Процентиль: 1%

0.00011

Низкий

CVE ID

Связанные уязвимости

CVE-2019-2199

CVSS3: 6.7

nvd

около 6 лет назад

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138650665

EPSS

Процентиль: 1%

0.00011

Низкий

CVE ID