CVE-2018-9554: Exposure of Sensitive Information to an Unauthorized Actor

In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

PT-2018-19047

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 8.1 Description The issue concerns a permissions bypass in the dumpExtractors function of IMediaExtractor.cp, potentially leading to the disclosure of recently accessed media files. This could result in local...