CVE-2024-27222

A vulnerability exists in the onSkipButtonClick method of FaceEnrollFoldPage.java within Google Pixel devices, specifically affecting the settings subcomponent. This Elevation of Privilege (EoP) vulnerability is caused by an Intent Redirect GRANT_URI_PERMISSIONS attack, which allows an attacker t...

CVE-2024-27222: Improper Privilege Management

In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access due to Intent Redirect GRANTURIPERMISSIONS Attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...