3 matches found
CVE-2022-20004
CVE-2022-20004 is a local-elevation vulnerability in Android where checkSlicePermission in SliceManagerService.java can access any slice URI due to improper input validation. Affected: Android 10–12L (including 12L) per multiple sources. Impact: local privilege escalation with high severity (CVSS...
CVE-2019-2175
In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2019-2175
In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...