CVE-2021-0927

In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0927

CVE-2021-0927 describes a local elevation-of-privilege in Android’s TvInputManagerService, triggered by a logic error in requestChannelBrowsable. The vulnerability affects Android 8.1, 9, 10, 11 and 12 and could allow a local attacker to bypass permissions with no user interaction. Public documen...