CVE-2021-23244

ColorOS is affected by a vulnerability where dangerous permissions are pre-granted to apps listed in a whitelist XML named default-grant-permissions. If an app from the whitelist is not installed, an attacker can masquerade with the same package name to obtain those dangerous permissions. The iss...