[Calling App Could Hide Requested Significant Action Info in MediaStore PermissionActivity via Malformed App Name]

2021-07-0100:00:00

Google

osv.dev

0.0004 Low

EPSS

Percentile

5.1%

JSON

In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CPENameOperatorVersion
platform/packages/providers/mediaprovidereq11

CPE	Name	Operator	Version
	platform/packages/providers/mediaprovider	eq	11

References

android.googlesource.com/platform/packages/providers/MediaProvider/+/800a66dc43292ab6acef3ec4e0cdca5d6bea532e

android.googlesource.com/platform/packages/providers/MediaProvider/+/fa329dfa35d4d555eb7f67b5747308d0d5936943

source.android.com/security/bulletin/2021-07-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for OSV:ASB-A-174495520