CWE Code: 275
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Permission Issues
Summary: in ispreferred of hidprofile.java in android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions bypass. this could lead to remote code execution with no additional execution privileges needed. user interaction is needed for exploitation.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-09-05
Last Modified Date: 2019-09-06