PT-2018-5564
CVE-2017-13286
·
تاريخ النشر
2018-04-04
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Android versions 8.0, 8.1
Description:
A permission bypass issue exists due to mismatched serialization in the
writeToParcel and readFromParcel methods of OutputConfiguration.java. This could lead to a local escalation of privilege, allowing a user to start an activity with system privileges without needing additional execution privileges. User interaction is not required for exploitation.Recommendations:
For Android versions 8.0 and 8.1, update to a version that includes the fix for the issue, as described in Android ID: A-69683251.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾