Security Advisory
CVE-2021-0369
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In CrossProfileAppsServiceImpl.java, there is the possibility of an applications INTERACT_ACROSS_PROFILES grant state not displaying properly in the setting UI due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-166561076