CVE-2021-0708

In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0708

CVE-2021-0708 in Android is described as a local elevation-of-privilege flaw caused by a confused deputy in ActivityManagerShellCommand.java (runDumpHeap). The issue enables deletion of system files and privilege escalation without additional execution privileges, with no user interaction require...