5.5
Moyenne
CVE-2021-25373 Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android…
Description
Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10.0) and 2.9.01.1 in Android R(11.0) allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Customization Service 2.9 | premières → < 2.9.01.1 | 2.9.01.1 |
| Customization Service 2.7 | premières → < 2.7.02.1 | 2.7.02.1 |
| Customization Service 2.4 | premières → < 2.4.03.0 | 2.4.03.0 |
| Customization Service 2.2 | premières → < 2.2.02.1 | 2.2.02.1 |