Lucene search
+L

4 matches found

osv_cve
osv_cve
•added 2021/12/27 7:15 p.m.•23 views

CVE-2021-23244

ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission...

7.8CVSS5.8AI score0.00654EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/12/27 12:00 a.m.•8 views

PT-2021-15416

Name of the Vulnerable Software and Affected Versions ColorOS affected versions not specified Description The issue allows an attacker to obtain dangerous permissions by disguising an app with the same package name as an app listed in the whitelist XML named default-grant-permissions, which is us...

7.8CVSS0.00654EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/27 12:00 a.m.•11 views

CVE-2021-23244: Undefined Security Weakness

ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission...

7.8CVSS5.8AI score0.00654EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/12/27 12:00 a.m.•22 views

OPPO ColorOS security vulnerabilities

OPPO ColorOS is a suite of Android-based operating systems for mobile devices from China's OPPO Guangdong Mobile Communications OPPO. ColorOS suffers from a security vulnerability that stems from ColorOS pre-granting dangerous permissions to applications listed in a whitelisted xml named...

7.8CVSS7.4AI score0.00654EPSS
SaveExploits0References2
Rows per page
Query Builder