CVE-2018-9469

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The issue is related to a missing permission check in multiple functions of ShortcutService.java, which could lead to the creation of a spoofed shortcut. This might result in local escalation of privilege in a privileged app, with no additional execution privileges needed. User interaction is required for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.