VULNERABILITY INTELLIGENCE

CVE-2021-0334

CVSS score7.8 HIGH
EPSS probability0.29%
CISA KEVNot currently listed
Published2021-02-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-163358811

Weakness classification

  • nvd@nist.gov: CWE-732

Primary references