Lucene search

K
osvGoogleOSV:ASB-A-196855999
HistoryJan 01, 2022 - 12:00 a.m.

PendingIntent in SimManager showNotificationToEsimIntroActivity could be Hijacked to Install or Enable Existing Packages

2022-01-0100:00:00
Google
osv.dev
8
simmanager
shownotificationtoesimintroactivity
euiccnotificationmanager
packagemanager
local escalation
privilege
user execution.

EPSS

0

Percentile

5.1%

In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-196855999