In NFC, there is a possible way to setup a default contactless payment app without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://source.android.com/docs/security/bulletin/android-14 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2023-10-30T16:18:53.654Z
Updated: 2024-09-06T20:36:48.297Z
Reserved: 2021-08-23T19:27:46.249Z
Link: CVE-2021-39810
Vulnrichment
Updated: 2024-08-04T02:20:33.343Z
NVD
Status : Modified
Published: 2023-10-30T17:15:47.503
Modified: 2024-09-06T21:35:00.760
Link: CVE-2021-39810
Redhat
No data.