CVE-2020-0419

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

ASB-A-142125338

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

PT-2020-11769

Name of the Vulnerable Software and Affected Versions Android versions 8.1 through 11 Description The issue is related to a possible leak of cross-profile URI data during app installation due to a missing permission check in the generateInfo method of PackageInstallerSession.java. This could lead...