The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed. Rated low severity (CVSS 3.3). No vendor patch available.
Qualcomm
Google
RCE
Android Msm
NVD
CVSS 2.0
3.3
EPSS
0.0%