Lucene search

K
osvGoogleOSV:ASB-A-154915372
HistoryDec 01, 2020 - 12:00 a.m.

WallpaperManagerService provides an implicit mutable PendingIntent to 3Ps

2020-12-0100:00:00
Google
osv.dev
14
wallpapermanagerservice
pendingintent
permission bypass
local escalation
privilege
user execution privileges
exploitation
software

EPSS

0

Percentile

5.1%

In bindWallpaperComponentLocked of WallpaperManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-154915372