CVE-2021-39701

In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission…

published March 16, 2022

CVSS
—
EPSS
0%
Percentile
32.9
In the wild
Unconfirmed
What it is

In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-212286849

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.9th percentile
Published
2022-03-16T14:04Z
EPSS history
Timeline
  • 16 MAR 14:04Z
    In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission…
    cvelistv5