Lucene search
GoogleOSV:ASB-A-173516292HistoryMar 01, 2021 - 12:00 a.m.
Misplaced Binder.getCallingUid() allows bypassing "while in use" permission from service
2021-03-0100:00:00
Google
osv.dev
18
misplaced binder.getcallinguid
activeservices.java
bypassing permission
local privilege escalation
software
confused deputy
foreground service launch
user execution privileges
EPSS
0
Percentile
5.1%
In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
Related
prion
prion
Design/Logic Flaw
2021-03-10 16:15:00
nvd
nvd
CVE-2021-0398
2021-03-10 16:15:16
cve
cve
CVE-2021-0398
2021-03-10 16:15:16
cvelist
cvelist
CVE-2021-0398
2021-03-10 15:40:12