Lucene search

K
osvGoogleOSV:ASB-A-305926929
HistoryApr 01, 2024 - 12:00 a.m.

Failure to persist privacy settings due to improper input validation leads to EoP

2024-04-0100:00:00
Google
osv.dev
7
improper input validation
notificationmanagerservice
local privilege escalation
user interaction not needed
software vulnerability

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for OSV:ASB-A-305926929