CVE-2021-1027

Name of the Vulnerable Software and Affected Versions Android versions Android-12

Description The issue is related to improper casting in the setTransactionState of SurfaceFlinger, which could lead to arbitrary code execution in a privileged process. This may result in local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations For Android version Android-12, consider restricting access to the SurfaceFlinger component to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.