CVE-2020-0401

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check

published September 17, 2020

CVSS
—
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and granting spurious permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150857253

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00278 · 19.2th percentile
Published
2020-09-17T15:28Z
EPSS history
Timeline
  • 17 SEP 15:28Z
    In setInstallerPackageName of PackageManagerService.java, there is a missing permission check
    cvelistv5