Code injection

In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could allow an app to add or replace a HAL service with its own service, gaining code execution in a privileged process.Product: AndroidVersions: Android-8....

PT-2019-16126

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9 Description The issue is related to an insecure permissions check in the ServiceManager::add function within the hardware service manager. This check is based on the PID of the caller, which could be exploited by...

CVE-2019-2023: Incorrect Permission Assignment for Critical Resource

In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could allow an app to add or replace a HAL service with its own service, gaining code execution in a privileged process.Product: AndroidVersions: Android-8....

CVE-2017-13209

In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a local elevation of privilege enabling code...

PT-2018-5505

Name of the Vulnerable Software and Affected Versions: Android versions 8.0, 8.1 Description: The issue is related to an insecure permissions check in the ServiceManager::add function within the hardware service manager. This could allow an application or service to replace a HAL service with its...

CVE-2017-13209: Missing Authorization

In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a local elevation of privilege enabling code...