VDB

ASB-A-237405974

ASB-A-237405974 PUBLISHED

In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

VendorProductVersions
platformpackages/modules/Permission13-next, 12:0, 12

Timeline

  • Mar 1, 2023 CVE Published
  • May 15, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›