The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed. Rated low severity (CVSS 3.3). No vendor patch available.
RCE
Google
Qualcomm
Android Msm
Codeaurora
NVD
CVSS 2.0
3.3
EPSS
0.0%