CWE Code: 276
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Incorrect Default Permissions
Summary: in startactivitymaywait of activitystarter.java, there is a possible incorrect activity launch due to an incorrect permission check. this could lead to local escalation of privilege with no additional execution privileges needed. user interaction is not needed for exploitation.product: androidversions: android-7.1.1 android-7.1.2 android-8.0 android-8.1 android-9android id: a-123013720
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-10-11
Last Modified Date: 2019-10-16