CVE-2021-0388

In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler

published March 10, 2021

CVSS
—
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could lead to local escalation of privilege resulting in attributing video call data to the wrong app, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162741489

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00126 · 2.1th percentile
Published
2021-03-10T16:12Z
EPSS history
Timeline
  • 10 MAR 16:12Z
    In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler
    cvelistv5