Vulnetix
Try Vulnetix Request Demo
ASB-A-276729064 PUBLISHED

In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Affected Products

VendorProductVersions
platformframeworks/base14-next:0, 14-next, 11:0

Timeline

References

Open in Interactive Console →