Platform External Robolectric-Shadows vulnerabilities

1 known vulnerability affecting platform/external_robolectric-shadows.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

UNKNOWN1

Vulnerabilities

Page 1 of 1

CVE-2021-0922UNKNOWN≥ 11:0, < 11:2021-11-012021-11-01

CVE-2021-0922 CVE-2021-0922: In enforceCrossUserOrProfilePermission of PackageManagerService In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PROFILES permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.