CVE-2021-0376

Name of the Vulnerable Software and Affected Versions: Android versions Android-11

Description: In the checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations: For Android version Android-11, consider restricting access to the MediaProvider.java functions until a patch is available. As a temporary workaround, review and restrict file permissions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.