Description (CNA)
ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / OPPO Android Phone | affected OPPO Mobile phones with ColorOS 11 version |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.