CWE Code: 276
Vulnerability Type: privilege_escalation
CVSS Score: 4.4
CWE Name:  Incorrect Default Permissions
Summary: in the default privileges of nfc, there is a possible local bypass of user interaction requirements on package installation due to a default permission. this could lead to local escalation of privilege by installing an application with no additional execution privileges needed. user interaction is needed for exploitation.product: androidversions: android-8.0 android-8.1 android-9android id: a-123700348
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-10-11
Last Modified Date: 2019-10-25