CVE-2020-0188

In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingIntent error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0188

The CVE-2020-0188 entry concerns Android 10 and a vulnerability in SettingsSliceProvider.java. In onCreatePermissionRequest, a PendingIntent error can permit a permissions bypass, enabling local elevation of privilege with user privileges required and no user interaction needed. Public disclosure...