PT-2021-16674

CVE-2021-25484

Published

2021-10-06

Updated

2021-10-13

CVSS 3.1

4.0

Medium

MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: InputManagerService versions prior to SMR Oct-2021 Release 1

Description: The issue is related to improper authentication in the InputManagerService, which allows monitoring of touch events.

Recommendations: For versions prior to SMR Oct-2021 Release 1, update to SMR Oct-2021 Release 1 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾