Lucene search

K
osvGoogleOSV:ASB-A-174749461
HistoryMar 01, 2021 - 12:00 a.m.

Don't allow apps from background user to modify suggestions of foreground user

2021-03-0100:00:00
Google
osv.dev
19
wifinetworksuggestionsmanager
unauthorized modification
privilege escalation
user interaction
software vulnerability
permission check

EPSS

0

Percentile

5.1%

In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-174749461