Lucene search
Google_androidCVELIST:CVE-2021-0478HistoryJun 21, 2021 - 4:01 p.m.
CVE-2021-0478
2021-06-2116:01:26
google_android
www.cve.org
2
permission bypass
statusbariconview.java
local privilege escalation
foreground services
user notification
user execution privileges
android-10
android-11
android-8.1
android-9
cve-2021-0478
EPSS
0
Percentile
5.1%
In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-169255797
CNA Affected
[
{
"product": "Android",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Android-10 Android-11 Android-8.1 Android-9"
}
]
}
]Related
cve
cve
CVE-2021-0478
2021-06-21 17:15:08
nvd
nvd
CVE-2021-0478
2021-06-21 17:15:08
osv
osv
prion
prion
Design/Logic Flaw
2021-06-21 17:15:00
ics
ics
Siemens SIMATIC
2024-03-14 12:00:00