CVE-2021-39618

CVE-2021-39618 affects Android 9–12 where the EuiccNotificationManager.java contains an unsafe PendingIntent that allows a local attacker to install existing packages without user consent. This enables local privilege escalation with user privileges required, and exploitation does not require use...

CVE-2021-39625: Undefined Security Weakness

In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

CVE-2021-39618: Undefined Security Weakness

In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

PT-2022-10926

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local...

PT-2022-10933

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description The issue is related to an unsafe PendingIntent in the EuiccNotificationManager.java, specifically in the showCarrierAppInstallationNotification method. This could allow access to...