CVE-2021-25410: Google Android

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated privilege.

Affected products

• Google Android: version 11.0 only

Published 2021-06-11. Last modified 2026-06-17.