CVE-2021-0306 – In addAllPermissions of PermissionManagerService.java, there is a possible permissions byp …

11 January 2021

Vuln ID: CVE-2021-0306

Published: 2021-01-11 22:15:13Z

Description: In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an app to gain the android.permission.ACTIVITY_RECOGNITION permission without user confirmation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11, Android-8.0, Android-8.1, Android-9, Android-10; Android ID: A-154505240.

Source: NVD.NIST.GOV

Date:

11 January 2021

Categorie(s):

NVD

Tag(s):

NVD

Over 850 Vulnerable Devices Secured Through CISA Ransomware Program26 April 2024
Feds Bust Privacy-Centric Samourai Wallet Over BTC Money Laundering26 April 2024
NETGEAR buffer Overflow Vulnerability Let Attackers Bypass Authentication26 April 2024
Enhancing Cybersecurity Defenses: The role of Voice Cloning in Penetration Testing26 April 2024
Ensuring the Security and Efficiency of Web Applications and Systems26 April 2024