46 matches found
CVE-2022-30710: Improper Input Validation
Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...
PT-2022-20247
Name of the Vulnerable Software and Affected Versions RemoteViews versions prior to SMR Jun-2022 Release 1 Description The issue is related to improper validation in RemoteViews, which can be exploited by attackers to launch certain activities. Recommendations For versions prior to SMR Jun-2022...
Code injection
In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...
PUB-A-179461812
In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Google Android injection vulnerability
Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android 11. The vulnerability arises due to a privilege bypass in isRestricted in RemoteViews.java. An attacker could exploit the...
