PT-2020-11754 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions 8.0 through 11 Description: The issue is related to a missing permission check in the setInstallerPackageName of PackageManagerService.java. This could lead to local escalation of privilege and granting spurious permissions...

CVE-2020-0401: Missing Authorization

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...