Skip to content
OpenAdvisories
Unscored CVE-2021-39618 EUVD-2021-25975GHSA-6422-47gp-w7v8

In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an u…

Published Jan 14, 2022 · Updated Aug 4, 2024 · Assigned by google_android

Description

In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-196855999

Affected products

VendorProductAffectedFixed
— Android Android-10 Android-11 Android-12 Android-9 —

References