Apexd Heap Buffer Overflow Privilege Escalation

The vulnerability of the VerifyNoOverlapInSessions function in the apexd.cpp file of the Android operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

CVE-2021-0702

In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...