PT-2022-9141

CVE-2021-1033

·

Published

2022-03-30

·

Updated

2022-04-05

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions Android-12L
Description The issue is related to a possible permission bypass due to an unsafe PendingIntent in the createGeneralSlice function of ConnectedDevicesSliceProvider.java. This could lead to local escalation of privilege, requiring User execution privileges. Notably, user interaction is not necessary for exploitation.
Recommendations For Android version Android-12L, apply the necessary security patches to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-276: Incorrect Default Permissions
Related identifiers
CVE-2021-1033
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com