In onUidStateChanged of AppOpsService.java, there is a...
High severity
Unreviewed
Published
Mar 17, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Mar 16, 2022
Published to the GitHub Advisory Database
Mar 17, 2022
Last updated
Jan 27, 2023
In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-208662370
References