CVE-2021-0534

In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value

published June 22, 2021

CVSS
—
EPSS
0%
Percentile
1.6
In the wild
Unconfirmed
What it is

In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170639543

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00117 · 1.6th percentile
Published
2021-06-22T10:56Z
EPSS history
Timeline
  • 22 JUN 10:56Z
    In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value
    cvelistv5