CyberRota Analysis
AI-GeneratedA permissions bypass vulnerability in the maybeRemoveInvalidInstallerPackageName function of InstallRepository.kt allows unauthorized app updates, potentially leading to local privilege escalation without requiring additional execution privileges or user interaction. This issue poses a significant risk to systems where the affected products are deployed, making it crucial for developers and security teams to prioritize remediation efforts to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.