CVE-2021-39618

In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

CVE-2021-39618

CVE-2021-39618 affects Android 9–12 where the EuiccNotificationManager.java contains an unsafe PendingIntent that allows a local attacker to install existing packages without user consent. This enables local privilege escalation with user privileges required, and exploitation does not require use...