CVE-2021-39625

In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe…

published January 14, 2022

CVSS
—
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194695347

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00130 · 2.4th percentile
Published
2022-01-14T19:10Z
EPSS history
Timeline
  • 14 JAN 19:10Z
    In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe…
    cvelistv5