5.5
Medium
CVE-2021-25373 Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android…
Description
Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10.0) and 2.9.01.1 in Android R(11.0) allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Customization Service 2.9 | earliest → < 2.9.01.1 | 2.9.01.1 |
| Customization Service 2.7 | earliest → < 2.7.02.1 | 2.7.02.1 |
| Customization Service 2.4 | earliest → < 2.4.03.0 | 2.4.03.0 |
| Customization Service 2.2 | earliest → < 2.2.02.1 | 2.2.02.1 |