systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 prior to 2016-09-01 does not prevent tuner changes on the lockscreen, which allows physically proximate malicious users to gain privileges by modifying a setting, aka internal bug 30107438.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
google android 7.0 |