Input validation

In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0600

CVE-2021-0600 affects Android devices (Android 8.1–11) with an elevation-of-privilege vulnerability in DeviceAdminAdd.java. The issue arises from improper input validation that could mislead a user into activating a device admin app, enabling local privilege escalation without additional privileg...