What’s Vulnerable › Vulnerabilities

CVE-2021-23244

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-27 · updated 2026-06-17

Description

ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission.

Affected products

• OPPO ColorOS: 11

References

• https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1474214753353342976
• https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1474214753353342976

Get alerted when CVE-2021-23244 or the next vulnerability affects your stack