Описание
In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-140195904
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
EPSS
Процентиль: 1%
0.0001
Низкий
6.7 Medium
CVSS3
3.7 Low
CVSS2
Дефекты
CWE-367
Связанные уязвимости
CVSS3: 6.7
github
больше 3 лет назад
In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-140195904
EPSS
Процентиль: 1%
0.0001
Низкий
6.7 Medium
CVSS3
3.7 Low
CVSS2
Дефекты
CWE-367