Oppo: >> Coloros >> 11 Security Vulnerabilities
In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-03-11
ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission.
CVSS Score
7.8
EPSS Score
0.002
Published
2021-12-27