ASB-A-210065877

In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-0306

In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an app to gain the android.permission.ACTIVITYRECOGNITION permission without user confirmation. This could lead to local escalation of privilege with no...

PT-2021-12990

Name of the Vulnerable Software and Affected Versions: Android versions Android-8.0 through Android-11 Description: The issue allows an app to bypass permissions and gain the android.permission.ACTIVITY RECOGNITION permission without user confirmation when upgrading major Android versions. This...