2 matches found
Design/Logic Flaw
In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...
7.6CVSS7.7AI score0.00353EPSS
SaveExploits0References1Affected Software1
CVE-2021-39794: Incorrect Default Permissions
In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...
7.8CVSS7.3AI score0.00353EPSS
SaveExploits0References2
20