2 matches found
CVE-2020-0486
In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege to change contact data with no additional execution privileges needed. User interaction is not needed for...
7.8CVSS8.3AI score0.00134EPSS
SaveExploits0References1
Design/Logic Flaw
In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege to change contact data with no additional execution privileges needed. User interaction is not needed for...
4.6CVSS7.7AI score0.00134EPSS
SaveExploits0References1Affected Software1
20