Beveiligingsadvies

CVE-2021-39618

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-01-14 19:10:51

Laatst bijgewerkt 2024-08-04 02:13:37

Toegewezen door google_android

CVSS-score geen score

Status PUBLISHED

Beschrijving

In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-196855999

← Alle CVE's bekijken Bekijk op cve.org ↗