In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141.
| Software | From | Fixed in |
|---|---|---|
| linuxfoundation / yocto | 4.0 | 4.0.x |
| rdkcentral / rdk-b | 2024q1 | 2024q1.x |
| google / android | 13.0 | 13.0.x |
| google / android | 14.0 | 14.0.x |
| google / android | 15.0 | 15.0.x |
| google / android | 16.0 | 16.0.x |
| openwrt / openwrt | 21.02.0 | 21.02.0.x |
| openwrt / openwrt | 23.05.0 | 23.05.0.x |