Lucene search

K
osvGoogleOSV:ASB-A-171430330
HistoryJul 01, 2021 - 12:00 a.m.

: Unauthorized file access through the READ_EXTERNAL_STORAGE permission

2021-07-0100:00:00
Google
osv.dev
10
file access
external storage
permissions bypass
privilege escalation
user execution privileges
exploitation
user interaction

EPSS

0

Percentile

5.1%

In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-171430330