CVE-2021-0594

In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation

published July 14, 2021

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176445224

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01396 · 72.2th percentile
Published
2021-07-14T13:44Z
EPSS history
Timeline
  • 14 JUL 13:44Z
    In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation
    cvelistv5