Skip to content
OpenAdvisories
Unscored CVE-2021-0305 EUVD-2021-2924GHSA-qp58-fc8h-jpwx

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privile…

Published Feb 10, 2021 · Updated Aug 3, 2024 · Assigned by google_android

Description

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-154015447

Affected products

VendorProductAffectedFixed
— Android Android-8.1 Android-9 Android-10 —

Advisories 3

References