CWE Code: 275
Vulnerability Type: privilege_escalation
CVSS Score: 4.4
CWE Name:  Permission Issues
Summary: in checkaccess of slicemanagerservice.java in android 9, there is a possible permissions check bypass due to incorrect order of arguments. this could lead to local escalation of privilege with no additional execution privileges needed. user interaction is needed for exploitation.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-09-05
Last Modified Date: 2019-09-06