ASB-A-159145361

vendorUSosv

view advisory published 2021-01-01Licence: per source

In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-0322US	medium5.0	0.17% (6th)	—	2021-01-11
In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input validation. This could lead to local information disclosure with…

references

External citations — patches, advisories, analysis.

https://android.googlesource.com/platform/frameworks/base/+/a185996c829a159bb27446697329b01464ab3c03FIX
https://android.googlesource.com/platform/frameworks/base/+/e237a83f95767f669b83508bb1f594091cbd6bacFIX
https://source.android.com/security/bulletin/2021-01-01ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan