CVE-2021-0593: Externally Controlled Reference to a Resource in Another Sphere

In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product:...

Google Android DevicePickerFragment.java elevation of privilege vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. an elevation of privilege vulnerability exists in Google Android DevicePickerFragment.java. An attacker could exploit this vulnerability to escalate privileges...

CVE-2021-0586

In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

CVE-2021-0586: Improper Restriction of Rendered UI Layers or Frames

In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

PT-2021-13228

Name of the Vulnerable Software and Affected Versions: Android versions Android-8.1 through Android-11 Description: The issue is related to a tapjacking/overlay attack in the DevicePickerFragment.java file, which could trick the user into selecting an unwanted Bluetooth device. This could lead to...