CVE-2021-0385

In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to…

published March 10, 2021

CVSS
—
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to notification interaction above the lockscreen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172584372

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.1th percentile
Published
2021-03-10T16:11Z
EPSS history
Timeline
  • 10 MAR 16:11Z
    In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to…
    cvelistv5