Buffer overflow

In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

PT-2020-11372 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions 8.0 Description: A time-of-check time-of-use vulnerability in the onCreate method of InstallStart.java could allow for a package validation bypass. This issue may lead to local escalation of privilege without requiring...