Skip to content
OpenAdvisories
Unscored CVE-2019-2199 EUVD-2019-11841GHSA-3m49-jmr4-jpx2

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of pr…

Published Nov 13, 2019 · Updated Aug 4, 2024 · Assigned by google_android

Description

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138650665

Affected products

VendorProductAffectedFixed
— Android Android-10 —

References