CVE-2018-9377

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9377

A vulnerability exists in the getIntentForIntentSender function of ActivityManagerService.java within the Android framework. The flaw allows for local escalation of privilege or information disclosure because an attacker can access user metadata via a pending intent. This vulnerability can be exp...

CVE-2018-9377

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...