Lucene search

K
osvGoogleOSV:ASB-A-154319182
HistoryJul 01, 2021 - 12:00 a.m.

Empty Intent in PendingIntent causes arbitrary broadcast transmission (QC CR 2776815)

2021-07-0100:00:00
Google
osv.dev
11
gpsnetinitiatedhandler
privilege escalation
pendingintent
permissions bypass
user execution privileges
local escalation
software

EPSS

0

Percentile

5.1%

In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-154319182