In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174302616
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Ch0pin/CVE20210485
- https://github.com/Ch0pin/related_work
- https://github.com/fardeen-ahmed/Bug-bounty-Writeups