Lucene search

K
osvGoogleOSV:ASB-A-123700107
HistoryJan 01, 2022 - 12:00 a.m.

Improper Intent.migrateExtraStreamToClipData() leads for granting permissions to grantUri marked providers without approval to thirdparty

2022-01-0100:00:00
Google
osv.dev
108
improper intent
clipdata
permissions
accountmanagerservice
permission bypass
information disclosure
user interaction
software

EPSS

0

Percentile

5.1%

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-123700107