Lucene search

K
osvGoogleOSV:ASB-A-157320644
HistoryAug 01, 2021 - 12:00 a.m.

[Android 11 DP4, Build 6455311] - Operations on the external application storage directory are not restricted

2021-08-0100:00:00
Google
osv.dev
14
android 11
externalstorageprovider
permissions bypass
privilege escalation
user interaction

EPSS

0

Percentile

15.9%

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an app to read private app directories in external storage, which should be restricted in Android 11, with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

0

Percentile

15.9%

Related for OSV:ASB-A-157320644