Vulnerabilities > CVE-2021-1006 - Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Android 12.0

047910
CVSS 4.4 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
google
CWE-1021

Summary

In several functions of DatabaseManager.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-183961974

Vulnerable Configurations

Part Description Count
OS
Google
1