CVE-2018-9492

In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0...

CVE-2018-9492

CVE-2018-9492 concerns Android’s ActivityManagerService.checkGrantUriPermissionLocked, where a permissions bypass could allow local elevation of privilege without user interaction. Affected Android versions are 8.0, 8.1, and 9.0. The vulnerability’s impact is a local, privilege-escalation risk; t...