In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "binaries": [ { "binary_version": "1:10.0.0+r36-3", "binary_name": "aapt" }, { "binary_version": "1:10.0.0+r36-3", "binary_name": "android-framework-res" }, { "binary_version": "1:10.0.0+r36-3", "binary_name": "android-libaapt" }, { "binary_version": "1:10.0.0+r36-3", "binary_name": "android-libandroidfw" }, { "binary_version": "1:10.0.0+r36-3", "binary_name": "android-libandroidfw-dev" }, { "binary_version": "1:10.0.0+r36-3", "binary_name": "split-select" } ] }
{ "binaries": [ { "binary_version": "1:14~beta1-2build3", "binary_name": "aapt" }, { "binary_version": "1:14~beta1-2build3", "binary_name": "android-framework-res" }, { "binary_version": "1:14~beta1-2build3", "binary_name": "android-libaapt" }, { "binary_version": "1:14~beta1-2build3", "binary_name": "android-libandroidfw" }, { "binary_version": "1:14~beta1-2build3", "binary_name": "android-libandroidfw-dev" }, { "binary_version": "1:14~beta1-2build3", "binary_name": "split-select" } ] }
{ "binaries": [ { "binary_version": "1:6.0.1+r16-1", "binary_name": "aapt" }, { "binary_version": "1:6.0.1+r16-1", "binary_name": "aidl" }, { "binary_version": "1:6.0.1+r16-1", "binary_name": "android-libaapt" }, { "binary_version": "1:6.0.1+r16-1", "binary_name": "android-libandroidfw" }, { "binary_version": "1:6.0.1+r16-1", "binary_name": "android-libandroidfw-dev" }, { "binary_version": "1:6.0.1+r16-1", "binary_name": "split-select" } ] }
{ "binaries": [ { "binary_version": "1:8.1.0+r23-3~18.04", "binary_name": "aapt" }, { "binary_version": "1:8.1.0+r23-3~18.04", "binary_name": "android-framework-res" }, { "binary_version": "1:8.1.0+r23-3~18.04", "binary_name": "android-libaapt" }, { "binary_version": "1:8.1.0+r23-3~18.04", "binary_name": "android-libandroidfw" }, { "binary_version": "1:8.1.0+r23-3~18.04", "binary_name": "android-libandroidfw-dev" }, { "binary_version": "1:8.1.0+r23-3~18.04", "binary_name": "split-select" } ] }
{ "binaries": [ { "binary_version": "1:8.1.0+r23-3build2", "binary_name": "aapt" }, { "binary_version": "1:8.1.0+r23-3build2", "binary_name": "android-framework-res" }, { "binary_version": "1:8.1.0+r23-3build2", "binary_name": "android-libaapt" }, { "binary_version": "1:8.1.0+r23-3build2", "binary_name": "android-libandroidfw" }, { "binary_version": "1:8.1.0+r23-3build2", "binary_name": "android-libandroidfw-dev" }, { "binary_version": "1:8.1.0+r23-3build2", "binary_name": "split-select" } ] }