Lucene search
GoogleOSV:ASB-A-184046948HistorySep 01, 2021 - 12:00 a.m.
HeapDumpProvider is open to any app
2021-09-0100:00:00
Google
osv.dev
8
0.0004 Low
EPSS
Percentile
5.1%
In openFile of HeapDumpProvider.java, there is a possible way to retrieve generated heap dumps from debuggable apps due to an unprotected provider. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| platform/frameworks/base | eq | 11 |
Related
cnvd
cnvd
Google Android Information Disclosure Vulnerability (CNVD-2021-77619)
2021-09-08 00:00:00
cve
cve
CVE-2021-0693
2021-10-06 15:15:15
nvd
nvd
CVE-2021-0693
2021-10-06 15:15:15
cvelist
cvelist
CVE-2021-0693
2021-10-06 14:11:39
prion
prion
Heap overflow
2021-10-06 15:15:00