2 matches found
CVE-2020-0401: Missing Authorization
In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...
7.8CVSS7.4AI score0.00278EPSS
SaveExploits0References2
ASB-A-150857253
In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation...
7.8CVSS7.4AI score0.00278EPSS
SaveExploits0References2
20