2 matches found
CVE-2021-39810
In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactless payment app without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...
7.8CVSS6.7AI score0.00119EPSS
SaveExploits0References1
CVE-2021-39810: Missing Authorization
In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactless payment app without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...
7.8CVSS7.3AI score0.00119EPSS
SaveExploits0References3
20