PT-2021-13429
CVE-2021-1024
·
تاريخ النشر
2021-12-15
·
تاريخ التحديث
2021-12-17
الوصف من
CVSS 3.1
6.7
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Android versions Android-12
Description
The issue is related to a possible intent redirection due to a confused deputy in the onEventReceived function of EventResultPersister.java. This could lead to local escalation of privilege, with System execution privileges required for exploitation. Notably, user interaction is not necessary for exploitation.
Recommendations
For Android version Android-12, consider restricting access to the onEventReceived function of EventResultPersister.java to minimize the risk of exploitation until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾