Threats tagged 'ghsa-94pc-fqrw-vjg9'

An unprivileged application can exploit a lack of package and signature validation in SystemUI's RemoteQCController when resolving a hardcoded content URI. This vulnerability allows an attacker to squat on a specific authority if the legitimate package is absent, inject spoofed UI elements into the trusted SystemUI Quick Controls panel, and gain a Background Activity Launch grant when the user interacts with the spoofed element.