NuytsTech Security

CVE-2021-0973

by ·

In isFileUri of UriUtil.java, there is a possible way to bypass ignoring attachment due to improper handling of case sensitivity. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197328178

Date published : 2021-12-15

https://source.android.com/security/bulletin/pixel/2021-12-01

Tags: