In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Android | 8.0 (including) | 8.0 (including) | |
Android | 8.1 (including) | 8.1 (including) | |
Android | 9.0 (including) | 9.0 (including) |