AOSP-DownloadProviderDbDumper

AOSP-DownloadProviderDbDumper AndroidのダウンロードプロバイダにおけるSQLインジェクションを悪用するPoC CVE-2018-9493 セキュリティアドバイザリ https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-SQL-Injection-CVE-2018-9493.pdf 詳細情報...

CVE-2018-9493

CVE-2018-9493 affects Android’s Download Manager content provider, with an SQL injection due to improper input validation. This could lead to local information disclosure without extra privileges or user interaction. Affected Android versions include 7.0–9.0. The provided sources describe the iss...