Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
yanzhenjie/andpermission
master @ 00bedd6
1
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
StandardChecker.java: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: A logic error in the multi-permission verification loop allowed the application to prematurely return a positive authorization result (true) when encountering a permission that lacked an associated AppOps operation, effectively bypassing security checks for subsequent permissions in the list.