CVE-2019-1010221

LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by adb root can also be set in a normal adb shell session. The component is: adb shell patches to fix this are at https://review.lineageos.org/c/LineageOS/androidsystemcore/+/234800,...

Design/Logic Flaw

LineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property checked by adb root can also be set in a normal adb shell session. The component is: adb shell patches to fix this are at https://review.lineageos.org/c/LineageOS/androidsystemcore/+/234800,...

CVE-2019-1010221

The CVE-2019-1010221 entry concerns LineageOS 16.0 and earlier where an Incorrect Access Control allows adb root state to be set from a normal adb shell. The underlying issue is that the property used to enable root in adb (service.adb.root) can be manipulated when adb is enabled, enabling an att...