CVE-2021-0567: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

PT-2021-13210

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue concerns a permissions bypass in the isRestricted function of RemoteViews.java, allowing for the injection of font files. This could lead to local escalation of privilege without requiring...

Google Android injection vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android 11. The vulnerability arises due to a privilege bypass in isRestricted in RemoteViews.java. An attacker could exploit the...