CVE-2021-0570

The CVE-2021-0570 entry maps to an elevation-of-privilege issue in Android 11’s BugreportProgressService.sendBugreportNotification caused by an unsafe PendingIntent. This can bypass privileges locally without user interaction, as vendor records and the Pixel update bulletin note patches for Andro...

CVE-2021-0570: Incorrect Permission Assignment for Critical Resource

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...