CVE-2021-0487 – In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data …

Vuln ID: CVE-2021-0487

Published:  2021-06-11  17:15:09Z

Description: In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174046397

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):