A Systematic Study of Security Enforcement at Android Inter-Component Boundaries

Android's inter-process communication IPC mechanisms Activities, Services, BroadcastReceivers, ContentProviders, and URI scheme handlers form the primary interface between applications and between applications and the system. We present a systematic study of security enforcement comprising 120...

ASB-A-295334906

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-225880741

In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...