2 matches found
CVE-2021-39631
In cleardatadlgtext of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...
5.5CVSS6.3AI score0.00111EPSS
SaveExploits0References1
PT-2022-14572 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: A permission bypass issue exists due to a confused deputy in the ConnectedDeviceDashboardFragment.java file. This could lead to remote escalation of privilege in Bluetooth settings...
8.8CVSS8.8AI score0.01061EPSS
SaveExploits0References2
20