Android Cross-User Permission Bypass Vulnerability in AppInfoBase.java
Vulnerability
A cross-user permission bypass vulnerability has been identified in the 'hasInteractAcrossUsersFullPermission' method of 'AppInfoBase.java'. This issue arises from a confused deputy problem, potentially allowing local privilege escalation without requiring additional execution privileges or user interaction.
Impact
Exploitation of this vulnerability could lead to unauthorized privilege escalation.
Added: Mar 2, 2026, 7:31 PM
Updated: Mar 2, 2026, 10:27 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
2.9remediation
0.0relevance
3.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.