CVE-2021-0380

In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of privilege during the onboarding flow with no additional execution privileges needed. User interaction...

CVE-2021-0380

CVE-2021-0380 affects Android 11 via DcTracker.java onReceive, where a missing permission check allows triggering a provisioning URL and altering telephony settings, enabling local elevation of privilege during onboarding without extra privileges. Exploitation requires no user interaction per the...