CVEs-PoC/2018/CVE-2018-9468.md

CVE-2018-9468

Description

In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This could lead to local information disclosure and file rewriting with no additional execution privileges needed. User interaction is not needed for exploitation.

POC

Reference

No PoCs from references.

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/IOActive/AOSP-DownloadProviderDbDumper
• https://github.com/IOActive/AOSP-DownloadProviderHeadersDumper
• https://github.com/IOActive/AOSP-DownloadProviderHijacker
• https://github.com/alphaSeclab/sec-daily-2019
• https://github.com/hectorgie/PoC-in-GitHub