CVE-2021-0705

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11

Description The issue is related to the sanitizeSbn function in NotificationManagerService.java, which allows a service to run in the foreground and maintain granted permissions due to a bypass of background service restrictions. This could lead to a local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations For Android versions Android-10 through Android-11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.