Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-23244

ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguis

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OPPO

Description

ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a OPPO Android Phone

  • OPPO Mobile phones with ColorOS 11 versionaffected

References