ASB-A-304497167

In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-39697

CVE-2021-39697 affects Android 11/12 via the DownloadProvider.java checkFileUriDestination path, where a missing permission check may bypass external storage private directories protection. This could allow local elevation of privilege with User-level privileges and no user interaction required. ...

CVE-2021-39697

In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directories protection due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...