### [CVE-2018-9492](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9492) ![](https://img.shields.io/static/v1?label=Product&message=Android&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=Elevation%20of%20privilege&color=brighgreen) ### Description In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9.0 Android ID: A-111934948 ### POC #### Reference No PoCs from references. #### Github - https://github.com/ARPSyndicate/cvemon