CVE-2021-0339

In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground

published February 10, 2021

CVSS
—
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-145728687

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00732 · 53.8th percentile
Published
2021-02-10T16:48Z
EPSS history
Timeline
  • 10 FEB 16:48Z
    In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground
    cvelistv5