Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BIND_REMOTEVIEWS permission.
| Software | From | Fixed in |
|---|---|---|
| google / android | 10.0 | 10.0.x |
| google / android | 11.0 | 11.0.x |
| google / android | 12.0 | 12.0.x |