In installKey of KeyUtil.cpp, there is a possible failure...
Moderate severity
Unreviewed
Published
Jun 28, 2023
to the GitHub Advisory Database
•
Updated Apr 4, 2024
Description
Published by the National Vulnerability Database
Jun 28, 2023
Published to the GitHub Advisory Database
Jun 28, 2023
Last updated
Apr 4, 2024
In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-140762419
References