Lucene search

K
osvGoogleOSV:ASB-A-201667614
HistoryDec 01, 2022 - 12:00 a.m.

[Media Provider] Security Report - [EoP: Bypass Storage Restriction in Android 11]

2022-12-0100:00:00
Google
osv.dev
31
mediaprovider
android 11
storage security
privilege escalation
user interaction

0.0004 Low

EPSS

Percentile

5.1%

In multiple locations of MediaProvider.java, there is a possible way to get read/write access to other applications’ dedicated, app-specific directory within external storage due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

0.0004 Low

EPSS

Percentile

5.1%

Related for OSV:ASB-A-201667614