In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05458478.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/pokerfacett/MY_CVE_CREDIT