Skip to content
OpenAdvisories
Unscored CVE-2021-0569 EUVD-2021-3188GHSA-gx5m-c6q5-vhp7

In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local …

Published Jun 22, 2021 · Updated Aug 3, 2024 · Assigned by google_android

Description

In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174045870

Affected products

VendorProductAffectedFixed
— Android Android-11 —

References