PT-2021-13205

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible out of bounds read in the Lag max of p ol wgh.cpp due to a missing bounds check. This could lead to remote information disclosure with no additional execution...

PT-2021-13187

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In the halWrapperDataCallback function of hal wrapper.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution...

PT-2021-13200

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: A missing permission check in the isBackupServiceActive function of BackupManagerService.java could lead to local information disclosure. This issue does not require additional execution privileges or...

PT-2021-13213

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass due to an unsafe PendingIntent in the sendBugreportNotification function of BugreportProgressService.java. This could lead to local escalation of...

PT-2021-13212

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue concerns a possible access to contacts due to a tapjacking/overlay attack in the ContactsDumpActivity.java. This could lead to local information disclosure, requiring user execution privilege...

PT-2021-13192

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: In the phNxpNciHal print res status function of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server...

PT-2021-13184

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a tapjacking/overlay attack in the WiFiInstaller.java file, which could allow the installation of a malicious Hotspot 2.0 configuration. This might lead to local escalation of...

PT-2021-13193

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In the phNxpNciHal print res status function of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System...

PT-2021-13215

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass in the AccountManagerService.java due to an unsafe PendingIntent. This could lead to local information disclosure, requiring User execution privileg...

PT-2021-13199

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass due to an unsafe PendingIntent in the getEndItemSliceAction of MediaOutputSlice.java. This could lead to local information disclosure, requiring Use...

CVE-2021-0554: Missing Authorization

In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158482162...

CVE-2021-0569: Improper Restriction of Rendered UI Layers or Frames

In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

PT-2021-13211

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a missing permission check in the DevicePolicyManagerService.java file, which could allow for the enabling of disabled profiles. This could lead to a local escalation of privile...

PT-2021-13186

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: In the archiveStoredConversation function of MmsService.java, there is a possible way to archive message conversations without user consent due to a missing permission check. This could lead to local...

CVE-2021-0536: Externally Controlled Reference to a Resource in Another Sphere

In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0570: Incorrect Permission Assignment for Critical Resource

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0565: Concurrent Execution using Shared Resource with Improper Synchronization

In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

PT-2021-3397

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible bypass of device admin settings due to unclear UI in the onBindViewHolder function of AppSwitchPreference.java. This could lead to local escalation of privilege,...

PT-2021-3456

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible use after free due to a race condition in the wrapUserThread function of AudioStream.cpp. This could lead to local escalation of privilege with no additional execution...

PT-2021-13185

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a tapjacking/overlay attack in the EmergencyCallbackModeExitDialog.java file. This could lead to a local escalation of privilege, requiring User execution privileges. User...