ASB-A-185126549

Import Source

https://storage.googleapis.com/android-osv/ASB-A-185126549.json

Aliases

CVE-2021-39627

Published

2022-01-01T00:00:00Z

Modified

2024-04-22T14:40:06Z

Details

In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/apps/Dialer

Package

Name: platform/packages/apps/Dialer

Affected ranges

Type: ECOSYSTEM
Events: Introduced

9:0

Fixed

9:2022-01-01

Introduced

10:0

Fixed

10:2022-01-01

Introduced

11:0

Fixed

11:2022-01-01

Introduced

12:0

Fixed

12:2022-01-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Dialer/+/9c452d9f25d8fb41fd3ec627293a2481fde778d4"
    ],
    "spl": "2022-01-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}