CVE-2021-0481

In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler

published June 11, 2021

CVSS
—
EPSS
1%
Percentile
54.6
In the wild
Unconfirmed
What it is

In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-172939189

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00754 · 54.6th percentile
Published
2021-06-11T16:42Z
EPSS history
Timeline
  • 11 JUN 16:42Z
    In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler
    cvelistv5