CVE-2021-39808

In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user notification due to…

published April 12, 2022

CVSS
—
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user notification due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209966086

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00110 · 1.2th percentile
Published
2022-04-12T16:11Z
EPSS history
Timeline
  • 12 APR 16:11Z
    In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user notification due to…
    cvelistv5