CVE-2021-0702

2021-10-2213:27:42

google_android

www.cve.org

revertactivesessions

mediastore downgrade

local information disclosure

android-11

a-193932765

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

18.1%

JSON

In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-193932765

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2021-10-01