~/products/platform/vendor_unbundled_google_packages_markupgoogle

pipeline liveDigest Docs

Platform Vendor Unbundled Google Packages Markupgoogle vulnerabilities

1 known vulnerability affecting platform/vendor_unbundled_google_packages_markupgoogle.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

UNKNOWN1

Vulnerabilities

SortPage 1 of 1

CVE-2021-0550P3UNKNOWN≥ 11:0, < 11:2021-06-012021-06-01

CVE-2021-0550 CVE-2021-0550: In onLoadFailed of AnnotateActivity In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITE_EXTERNAL_STORAGE permissions without user consent due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Platform Vendor Unbundled Google Packages Markupgoogle vulnerabilities | cvebase