3P apps can delete arbitrary system files via am dumpheap command

2021-10-0100:00:00

Google

osv.dev

3p apps

system files

am dumpheap

activitymanagershellcommand.java

local escalation

privilege escalation

user interaction

exploitation

software

EPSS

Percentile

5.1%

JSON

In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.