~/products/platform/packages_providers_calendarprovider

pipeline liveDigest Docs

Platform Packages Providers Calendarprovider vulnerabilities

1 known vulnerability affecting platform/packages_providers_calendarprovider.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

UNKNOWN1

Vulnerabilities

SortPage 1 of 1

CVE-2021-0487P3UNKNOWN≥ 11:0, < 11:2021-05-012021-05-01

CVE-2021-0487 CVE-2021-0487: In onCreate of CalendarDebugActivity In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.