CVE-2021-0799: High severity Google Android vulnerability

Published Nov 1, 2021

Updated

In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197647956

Affected Software

2 affected components

Google Android=12.0

Google Android

Event History

Nov 1, 2021

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Dec 15, 2021

CVE Published

via MITRE·06:05 PM

Data Sourced

via MITRE·06:05 PM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs local access and low-level privileges on the affected device. No user interaction or additional execution privileges are required.

What is the impact if exploitation succeeds?

Successful exploitation can result in local escalation of privilege, with high impact to confidentiality, integrity, and availability.

Which Android versions are identified as affected?

The provided data identifies Android 12 as affected.

CVE-2021-0799: High severity Google Android vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the impact if exploitation succeeds?

Which Android versions are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the impact if exploitation succeeds?

Which Android versions are identified as affected?