PT-2021-13043
CVE-2021-0364
·
Published
2021-02-02
·
Updated
2021-02-23
Description by
CVSS 3.1
6.7
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Android versions Android-10 through Android-11
Description:
In mobile log d, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Recommendations:
For Android versions Android-10 through Android-11, apply the patch with ID ALPS05458478 to resolve the issue. As a temporary workaround, consider restricting access to the mobile log d component to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾