CVE-2021-0375

In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value

published March 10, 2021

CVSS
—
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-167261484

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00123 · 1.9th percentile
Published
2021-03-10T15:57Z
EPSS history
Timeline
  • 10 MAR 15:57Z
    In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value
    cvelistv5