PT-2021-13137

CVE-2021-0481

·

تاريخ النشر

2021-05-01

·

تاريخ التحديث

2022-07-12

الوصف من

CVSS 2.0
9.3
عالية
المقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Android versions 8.1 through 11
Description: The issue is related to an unexpected URI handler in the EditUserPhotoController.java file, which could allow access to unauthorized files. This might lead to local escalation of privilege without requiring additional execution privileges. User interaction is necessary for exploitation.
Recommendations: For Android versions 8.1 through 11, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the affected URI handler in the EditUserPhotoController.java file.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ASB-A-172939189
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾