Skip to content
OpenAdvisories
Unscored CVE-2020-0122 EUVD-2020-1626GHSA-3h29-6jm6-hw9v

In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible p…

Published Jul 17, 2020 · Updated Aug 4, 2024 · Assigned by google_android

Description

In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-147247775

Affected products

VendorProductAffectedFixed
— Android Android-8.0, Android-8.1, Android-9, Android-10 —

References