Skip to content
OpenAdvisories
High · 7.8 CVE-2018-9374 EUVD-2018-20968GHSA-7485-8f3w-4mrf

In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege…

Published Nov 27, 2024 · Updated Nov 29, 2024 · Assigned by google_android

Description

In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 6, 6.0.1, 7, 7.1.1, 7.1.2, 8, 8.1 —

References