VDB
ASB-A-200688991
ASB-A-200688991
PUBLISHED
In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| platform | packages/apps/Settings | 10:0, 10:0, 10 |
Timeline
- Mar 1, 2022 CVE Published
- Aug 7, 2026 CVE Updated