CVE-2018-9377 — In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional — CVE Database · The Intelligence Room