Lucene search

K
osvGoogleOSV:ASB-A-162738636
HistoryJan 01, 2021 - 12:00 a.m.

[PendingIntent in SystemUI GlobalScreenshot Could be Hijacked to Theft of All Contacts ]

2021-01-0100:00:00
Google
osv.dev
11
globalscreenshot
pendingintent
permission bypass
local information disclosure
contacts
user execution privileges
exploitation
software

AI Score

5.2

Confidence

High

EPSS

0

Percentile

5.1%

In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of the user’s contacts with User execution privileges needed. User interaction is not needed for exploitation.

AI Score

5.2

Confidence

High

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-162738636