CVE-2021-0388

2021-03-1016:12:44

google_android

www.cve.org

imsphonecalltracker

data usage

android-11

local privilege escalation

video call

broadcast handler

cve-2021-0388

EPSS

Percentile

5.1%

JSON

In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could lead to local escalation of privilege resulting in attributing video call data to the wrong app, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162741489

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11"
      }
    ]
  }
]

References

source.android.com/security/bulletin/pixel/2021-03-01

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2021-0388