CVE-2021-0334

In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains

published February 10, 2021

CVSS
—
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-163358811

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00289 · 20.4th percentile
Published
2021-02-10T16:49Z
EPSS history
Timeline
  • 10 FEB 16:49Z
    In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains
    cvelistv5