CVE-2018-9374
No fix known EPSS <1%CVSS 7.8
In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
Products: Google Android, google pixel