CVE-2021-0315
HIGHAndroid 8.0-11 - Tapjacking/Overlay Attack via GrantCredentialsPermissionActivity
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2021-0315. PoCs published by nanopathi, pazhanivel07.
AI-analyzed exploit summary This repository contains performance test cases for Android's autofill framework, specifically targeting CVE-2021-0315. The code includes test cases for autofill functionality but does not contain an actual exploit or proof-of-concept for the vulnerability.
Description
In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-169763814.
Exploits (3)
This repository contains performance test cases for Android's autofill framework, specifically targeting CVE-2021-0315. The code includes test cases for autofill functionality but does not contain an actual exploit or proof-of-concept for the vulnerability.
This repository contains functional exploit code for CVE-2021-0315, targeting Android's autofill service. The code includes test cases that manipulate autofill behavior, demonstrating the vulnerability through controlled interactions with the AutofillManager.
This repository contains performance test cases for Android's autofill framework, specifically targeting CVE-2021-0315. The code includes test cases for autofill functionality but does not contain an actual exploit or malicious payload.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H