4 matches found
Design/Logic Flaw
In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2021-39694
CVE-2021-39694 affects Android 12 via a RoleParser.java issue that allows a default app to have user-denied permissions bypassed, enabling local escalation of privilege with no additional execution privileges and no user interaction required. Public exploitation details are not provided in the co...
CVE-2021-39694: Incorrect Default Permissions
In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
PT-2022-10977
Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a permissions bypass in the RoleParser.java parse, allowing default apps to obtain permissions that were explicitly denied by the user. This could lead to a local escalation of...