CVE-2019-2199

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass

published November 13, 2019

CVSS
—
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138650665

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.5th percentile
Published
2019-11-13T17:32Z
EPSS history
Timeline
  • 13 NOV 17:32Z
    In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass
    cvelistv5