Not rated
CVE-2021-39707 In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a…
Description
In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-200688991
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Android | Versions not published |
Other CVEs of Android
The 2441 CVEs of Android →
CVE-2023-21211
In multiple files, there is a possible out of bounds read due to a heap buffer overflow
Not rated
CVE-2023-21170
In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds…
Not rated
CVE-2023-21171
In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel…
Not rated
CVE-2023-21181
In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow
Not rated