Android Permission Bypass Vulnerability in ParsedPermissionUtils.java Allowing Privilege Escalation
Vulnerability
A vulnerability has been identified in the Android permission handling process, specifically within the 'parsePermissionGroup' function of 'ParsedPermissionUtils.java'. This issue allows for a bypass of the consent dialog required to obtain certain permissions. As a result, it could lead to unauthorized elevation of privileges on the device. Notably, this vulnerability does not require any additional execution privileges to exploit, and user interaction is not necessary.
Impact
Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user or application to perform actions or access resources that are normally restricted.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
