PT-2021-13137

CVE-2021-0481

·

Published

2021-05-01

·

Updated

2022-07-12

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Android versions 8.1 through 11
Description: The issue is related to an unexpected URI handler in the EditUserPhotoController.java file, which could allow access to unauthorized files. This might lead to local escalation of privilege without requiring additional execution privileges. User interaction is necessary for exploitation.
Recommendations: For Android versions 8.1 through 11, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the affected URI handler in the EditUserPhotoController.java file.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ASB-A-172939189
Found an issue in the description? Have something to add? Feel free to write us 👾