Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mr9v-396x-gwc8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-169255797

In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-169255797

EPSS

Процентиль: 2%
0.00015
Низкий

Дефекты

CWE-755

Связанные уязвимости

CVSS3: 7.8
nvd
больше 4 лет назад

In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-169255797

EPSS

Процентиль: 2%
0.00015
Низкий

Дефекты

CWE-755