Non notée
CVE-2021-1035 In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary…
Description
In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-12Android ID: A-195668284
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Android | Versions non publiées |
Autres CVE de Android
Les 2441 CVE de Android →
CVE-2023-21225
there is a possible way to bypass the protected confirmation screen due to Failure to lock display power
Non notée
CVE-2023-21195
In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect…
Non notée
CVE-2023-21203
In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation
Non notée
CVE-2023-21148
In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check
Non notée