Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rcx4-x4hm-jrrp

Опубликовано: 15 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 2%
0.00121
Низкий

7.8 High

CVSS3

Дефекты

CWE-441

Связанные уязвимости

CVSS3: 6.7
nvd
4 дня назад

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 2%
0.00121
Низкий

7.8 High

CVSS3

Дефекты

CWE-441