PT-2021-13200

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: A missing permission check in the isBackupServiceActive function of BackupManagerService.java could lead to local information disclosure. This issue does not require additional execution privileges or...

PT-2021-13213

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass due to an unsafe PendingIntent in the sendBugreportNotification function of BugreportProgressService.java. This could lead to local escalation of...

PT-2021-13199

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass due to an unsafe PendingIntent in the getEndItemSliceAction of MediaOutputSlice.java. This could lead to local information disclosure, requiring Use...

CVE-2021-0554: Missing Authorization

In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158482162...

PT-2021-13211

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a missing permission check in the DevicePolicyManagerService.java file, which could allow for the enabling of disabled profiles. This could lead to a local escalation of privile...

PT-2021-13186

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: In the archiveStoredConversation function of MmsService.java, there is a possible way to archive message conversations without user consent due to a missing permission check. This could lead to local...

CVE-2021-0536: Externally Controlled Reference to a Resource in Another Sphere

In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2021-13215

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass in the AccountManagerService.java due to an unsafe PendingIntent. This could lead to local information disclosure, requiring User execution privileg...

PT-2021-13212

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue concerns a possible access to contacts due to a tapjacking/overlay attack in the ContactsDumpActivity.java. This could lead to local information disclosure, requiring user execution privilege...

PT-2021-13201

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a missing null check in the RenderStruct of protostream objectsource.cc, which could lead to a crash. This could result in a remote denial of service, and no additional executio...

PT-2021-3456

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible use after free due to a race condition in the wrapUserThread function of AudioStream.cpp. This could lead to local escalation of privilege with no additional execution...

PT-2021-13209

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible out of bounds read in the accessAudioHalPidscpp function of TimeCheck.cpp due to a missing bounds check. This could lead to local information disclosure, requiring...

PT-2021-13205

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible out of bounds read in the Lag max of p ol wgh.cpp due to a missing bounds check. This could lead to remote information disclosure with no additional execution...

PT-2021-13185

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a tapjacking/overlay attack in the EmergencyCallbackModeExitDialog.java file. This could lead to a local escalation of privilege, requiring User execution privileges. User...

CVE-2021-0570: Incorrect Permission Assignment for Critical Resource

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0565: Concurrent Execution using Shared Resource with Improper Synchronization

In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

PT-2021-3397

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible bypass of device admin settings due to unclear UI in the onBindViewHolder function of AppSwitchPreference.java. This could lead to local escalation of privilege,...

PT-2021-13191

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible out of bounds write in the phNxpNciHal print res status function of phNxpNciHal.cc due to a missing bounds check. This could lead to local escalation of privilege wit...

PT-2021-13189

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a missing permission check in the updateNotification function of BeamTransferManager.java. This could lead to local information disclosure of paired Bluetooth addresses without...

CVE-2021-0569: Improper Restriction of Rendered UI Layers or Frames

In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...