Skip to content
OpenAdvisories
High · 7.8 CVE-2018-9477 EUVD-2018-21071GHSA-5rg2-32x4-8gcx

In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This c…

Published Nov 20, 2024 · Updated Nov 20, 2024 · Assigned by google_android

Description

In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 8, 8.1 —

References