Description
The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| vivo | Frame service | 2021.6.30 – < all | all |
Medium · 5.6
CVE-2021-26277
EUVD-2021-13089GHSA-xp3h-r7xh-px7p
Security Advisory | PendingIntent hijacking vulnerability in Framework Services
Published Feb 17, 2023 · Updated Mar 18, 2025 · Assigned by Vivo