CVE-2021-23244

ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed…

published December 27, 2021

CVSS
—
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00654 · 50.7th percentile
Published
2021-12-27T18:48Z
EPSS history
Timeline
  • 27 DEC 18:48Z
    ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed…
    cvelistv5