Sql injection

In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

PT-2023-27277 · Google · Android

Name of the Vulnerable Software and Affected Versions: DatabaseUtils.java affected versions not specified Description: The issue is related to a possible SQL injection due to unsafe deserialization in the appendEscapedSQLString function of DatabaseUtils.java. This could lead to local information...