CVE-2021-0953

In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

PT-2021-13368

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description The issue is related to an unsafe PendingIntent in the setOnClickActivityIntent of SearchWidgetProvider.java. This could allow access to contacts and history bookmarks without permissio...