An issue in the PowerOffWidgetReceiver function of Super Reboot (Root) Recovery v1.0.3 allows attackers to arbitrarily reset or power off the device via a crafted intent
https://play.google.com/store/apps/details?id=com.bdrm.superreboot
https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md