vciy

CVE-2019-2218 · Brief

CVEs like CVE-2019-2218

The records whose text reads closest to CVE-2019-2218, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

  1. In setInstallerPackageName of PackageManagerService.java, there is a missing permission check.

    Same weakness class, CWE-862 (missing authorization); same vendor or product family, Android.

  2. In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect…

    Same weakness class, CWE-862 (missing authorization); same vendor or product family, Android.

  3. In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission…

    Same weakness class, CWE-862 (missing authorization); same vendor or product family, Android.

  4. In onPermissionGrantResult of GrantPermissionsActivity.java, there is a possible incorrectly granted permission due to…

    Same weakness class, CWE-862 (missing authorization); same vendor or product family, Android.

  5. In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app…

    Same weakness class, CWE-862 (missing authorization); same vendor or product family, Android.

  6. In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a…

    Same weakness class, CWE-862 (missing authorization); same vendor or product family, Android.

  7. In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of…

    Same weakness class, CWE-862 (missing authorization); same vendor or product family, Android.

  8. In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission…

    Same weakness class, CWE-862 (missing authorization); same vendor or product family, Android.

  9. In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission…

    Same weakness class, CWE-862 (missing authorization); same vendor or product family, Android.

  10. In getSigningKeySet of PackageManagerService.java, there is a missing permission check.

    Same weakness class, CWE-862 (missing authorization); same vendor or product family, Android.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-02.