CVE-2021-26277

The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions...

CVE-2021-26277 Security Advisory | PendingIntent hijacking vulnerability in Framework Services

The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions...

CVE-2021-26277

CVE-2021-26277 describes a flaw in the framework service where pendingIntent is handled insecurely, enabling a malicious app with certain privileges to perform privileged actions. Connected sources indicate this affects Vivo Frame service on Android (prior to version 11), with root cause being im...