OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1.
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Link | Tags |
---|---|
https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1328876061836189696 | vendor advisory |