Skip to content
OpenAdvisories
Unscored CVE-2021-0521 EUVD-2021-3140GHSA-rwpm-6wj8-f5px

In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead t…

Published Jun 21, 2021 · Updated Aug 3, 2024 · Assigned by google_android

Description

In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of cross-user permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174661955

Affected products

VendorProductAffectedFixed
— Android Android-11 Android-8.1 Android-9 Android-10 —

Advisories 2

References