CVE-2018-9377

5.5MEDIUM

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional

公開日: 11/28/2024更新日: 4/3/2025
NVDで表示MITREで表示

説明

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

AI分析AIによる分析

影響を受ける製品

googleandroid
6.0
googleandroid
6.0.1

参照