CVE-2021-26277 — MEDIUM (5.6)

Q: What is CVE-2021-26277?

CVE-2021-26277 is a vulnerability with a CVSS score of 5.6 (MEDIUM). The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.

Q: How severe is CVE-2021-26277?

CVE-2021-26277 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2021-26277?

Check the references section above for vendor advisories and patch information. Affected products include: Vivo Frame Service, Google Android.

Vulnerability Description

The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.

CVSS Score

5.6

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Vivo	Frame Service	< 2021.6.30
Google	Android	< 11.0

Related Weaknesses (CWE)

CWE-94

References

https://www.vivo.com/en/support/security-advisory-detail?id=8Vendor Advisory
https://www.vivo.com/en/support/security-advisory-detail?id=8Vendor Advisory

FAQ

What is CVE-2021-26277?

CVE-2021-26277 is a vulnerability with a CVSS score of 5.6 (MEDIUM). The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.

How severe is CVE-2021-26277?

CVE-2021-26277 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-26277?

Check the references section above for vendor advisories and patch information. Affected products include: Vivo Frame Service, Google Android.