Lucene search

K
osvGoogleOSV:ASB-A-188554048
HistorySep 01, 2021 - 12:00 a.m.

Misconfigured SELinux system_app policy could lead to file overwrite/code execution/backdoor in arbitrary application on Android 11

2021-09-0100:00:00
Google
osv.dev
26
misconfigured selinux
file overwrite
code execution
backdoor
arbitrary application
android 11
system_app policy
local privilege escalation
system execution privileges
user interaction not needed
software

EPSS

0

Percentile

5.1%

In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in other processes due to an overly-permissive SELinux policy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-188554048