CVE-2009-1754

The CVE-2009-1754 entry describes Android 1.5 (CRB42) allowing a package to share a UID without proper verification of developer certificates during installation. This enables a remote, user‑assisted attacker to access data from other apps by installing a package that uses a sharedUserId with arb...