Lucene search
GoogleOSV:ASB-A-256202273HistoryMay 01, 2023 - 12:00 a.m.
"adb install -d" downgrades system apps
2023-05-0100:00:00
Google
osv.dev
3
android
adb
downgrade
system apps
privilege escalation
logic error
code
security vulnerability
In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| platform/frameworks/base | eq | 12 | |
| platform/frameworks/base | eq | 13 | |
| platform/frameworks/base | eq | 12L | |
| platform/frameworks/base | eq | 11 |
Related
cnvd
cnvd
Google Android elevation of privilege vulnerability (CNVD-2023-41881)
2023-05-18 00:00:00
cvelist
cvelist
CVE-2023-21116
2023-05-15 00:00:00
prion
prion
Code injection
2023-05-15 22:15:00
cve
cve
CVE-2023-21116
2023-05-15 22:15:12