CVE-2020-0418: Privilege Escalation in PackageInstaller
Summary
CVE-2020-0418: In getPermissionInfosForGroup of Utils.java, there is a logic error. Affects platform/packages/apps/PackageInstaller across 2 version ranges.
>= 10:0, < 10:2020-11-01
>= 11-next:0, < 11-next:2020-11-01
Fixed in 11-next:2020-11-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The PackageInstaller is an Android package management component that allows users to install, update, and uninstall applications on their devices. It is a critical system app responsible for handling the installation process securely. However, a vulnerability has been discovered in the PackageInstaller that could potentially allow an attacker to escalate their privileges on the device.
Vulnerability Detail
The vulnerability (CVE-2020-0418) exists in the Utils.java file within the PackageInstaller app. The getPermissionInfosForGroup method contains a logic error, which can be exploited by a local attacker with user execution privileges. This means that an attacker who already has limited access to the device can escalate their privileges and gain higher levels of control without requiring any user interaction. The vulnerability affects Android versions 8.0 and above.
How To Fix
Minimum fixed version
11-next:2020-11-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided fix by updating the PackageInstaller app.
Conclusion
The PackageInstaller app in Android is vulnerable to privilege escalation through custom permissions. It is crucial to update the app to the latest version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/apps/PackageInstaller →
FAQ
The vulnerability allows a local attacker to escalate their privileges on the device, potentially gaining unauthorized access to sensitive information or performing malicious actions.
Yes, it is crucial to update the PackageInstaller app to the latest version to mitigate the vulnerability.
No, the vulnerability can be exploited without any user interaction.
The vulnerability affects Android versions 8.0 and above.
There is no known public exploit for this vulnerability at the time of this report.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/apps/PackageInstaller.
