Lucene search

K
osvGoogleOSV:ASB-A-283962634
HistoryFeb 01, 2024 - 12:00 a.m.

Bypass access restriction on Android/data/directory and all subdirectories

2024-02-0100:00:00
Google
osv.dev
8
android
data directory
access restriction
bypass
input validation
local privilege escalation
user execution privileges
user interaction
software

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In queryChildDocuments of FileSystemProvider.java, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for OSV:ASB-A-283962634