Lucene search

K
osvGoogleOSV:ASB-A-289549315
HistoryNov 01, 2023 - 12:00 a.m.

Package name ownership not checked in ActivityManagerService#backupAgentCreated

2023-11-0100:00:00
Google
osv.dev
16
activitymanagerservice
backupagentcreated
missing permission check
local information disclosure
no user interaction
software security

AI Score

6.3

Confidence

High

EPSS

0

Percentile

9.0%

In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

6.3

Confidence

High

EPSS

0

Percentile

9.0%

Related for OSV:ASB-A-289549315