Vendor
Android
57 known vulnerabilities.
1 result · Clear filters · Feed
-
Medium 6.9
Race condition in AndroidTV TvSettings
There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between th…