CVE-2025-22428

In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user from the primary user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2025-35629

Name of the Vulnerable Software and Affected Versions: AppInfoBase.java affected versions not specified Description: A logic error in the hasInteractAcrossUsersFullPermission function within the AppInfoBase.java file may allow granting permissions to an application on a secondary user from a...