ANDROID'S CVE-2020-0401 (PACKAGEMANAGERSERVICE)

Summary from the TLDR InfoSec newsletter

This blog post dives into CVE-2020-0401 after an old OnePlus phone sparked curiosity about the vulnerability. The vulnerability allows malicious apps to register as installers without proper permissions so the author tried to exploit it.