CVE-2021-0481: Input Validation
In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-172939189
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-0481?
The severity of CVE-2021-0481 is considered moderate due to the potential for local escalation of privilege.
How do I fix CVE-2021-0481?
To mitigate CVE-2021-0481, updating to the latest version of Android or applying the security patches provided by Google is recommended.
Which versions of Android are affected by CVE-2021-0481?
CVE-2021-0481 affects Android versions 8.1, 9.0, 10.0, and 11.0.
What type of attack does CVE-2021-0481 facilitate?
CVE-2021-0481 facilitates local escalation of privilege through unauthorized file access.
Is user interaction required to exploit CVE-2021-0481?
Yes, user interaction is necessary for the exploitation of CVE-2021-0481.