CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: in telephony, there is a possible bypass of user interaction requirements due to missing permission checks. this could lead to local escalation of privilege with no additional execution privileges needed. user interaction is not needed for exploitation. product: androidversions: android-10android id: a-73136824
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-09-27
Last Modified Date: 2019-10-07