Lucene search

K
osvGoogleOSV:ASB-A-179699767
HistoryMay 01, 2022 - 12:00 a.m.

App can get access to all slice providers installed on the device without requiring any permission.

2022-05-0100:00:00
Google
osv.dev
8
access control
input validation
privilege escalation
exploitation
software

EPSS

0

Percentile

5.1%

In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-179699767