ASB-A-162738636

vendorUSosv

view advisory published 2021-01-01Licence: per source

In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of the user's contacts with User execution privileges needed. User interaction is not needed for exploitation.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-0304US	medium5.5	0.18% (7th)	—	2021-01-11
In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of the user's c…

references

External citations — patches, advisories, analysis.

https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297FIX
https://source.android.com/security/bulletin/2021-01-01ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan