VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 27, 2021· Updated Jun 17, 2026

CVE-2021-23244

CVE-2021-23244

Description

ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission.

Affected products

3
  • Oppo/ColorOS2 versions
    cpe:2.3:o:oppo:coloros:11:*:*:*:*:android:*:*+ 1 more
    • cpe:2.3:o:oppo:coloros:11:*:*:*:*:android:*:*
    • (no CPE)
  • ColorOS/ColorOSdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.