CVE-2021-0327

In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0327

CVE-2021-0327 affects Android (Android-9, Android-10, Android-11, Android-8.1) via getContentProviderImpl in ActivityManagerService, enabling a local privilege bypass due to non-restored binder identities. This could lead to local escalation of privilege without extra execution privileges or user...