An improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to delete certain local files.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Android | 8.1 (including) | 8.1 (including) | |
| Android | 9.0 (including) | 9.0 (including) | |
| Android | 10.0 (including) | 10.0 (including) |