PT-2021-13440

CVE-2021-1039

·

Published

2021-12-15

·

Updated

2021-12-20

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12
Description In NotificationAccessActivity of AndroidManifest.xml, there is a possible elevation of privilege (EoP) due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Recommendations For Android versions Android-9 through Android-12, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-1021: Improper Restriction of Rendered UI Layers or Frames
Related identifiers
CVE-2021-1039
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com