CVE-2021-25393CWE-94

Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data

Medium · published June 11, 2021

CVSS v3.1
6.6
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00138 · 2.9th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2021-06-11T14:45Z
EPSS history
Timeline
  • 11 JUN 14:45Z
    Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data
    cvelistv5