CVE-2021-0385

2021-03-1016:11:07

google_android

www.cve.org

android

wifi network

lockscreen notification

cve-2021-0385

local privilege escalation

EPSS

Percentile

5.1%

JSON

In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to notification interaction above the lockscreen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172584372

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11"
      }
    ]
  }
]

References

source.android.com/security/bulletin/pixel/2021-03-01

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2021-0385