‼ CVE-2021-0971 ‼
📖 Read
via "National Vulnerability Database".
In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-188893559📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1017 ‼
📖 Read
via "National Vulnerability Database".
In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-182583850📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0958 ‼
📖 Read
via "National Vulnerability Database".
In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-200041882📖 Read
via "National Vulnerability Database".
‼ CVE-2021-39650 ‼
📖 Read
via "National Vulnerability Database".
In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-169763055References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1008 ‼
📖 Read
via "National Vulnerability Database".
In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197327688📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0932 ‼
📖 Read
via "National Vulnerability Database".
In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation of privilege that allows actions performed as the System UI with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-173025705📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4119 ‼
📖 Read
via "National Vulnerability Database".
bookstack is vulnerable to Improper Access Control📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0923 ‼
📖 Read
via "National Vulnerability Database".
In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-195338390📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0984 ‼
📖 Read
via "National Vulnerability Database".
In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192475653📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1003 ‼
📖 Read
via "National Vulnerability Database".
In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change audio stream volume due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-189857506📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0956 ‼
📖 Read
via "National Vulnerability Database".
In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-189942532📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0918 ‼
📖 Read
via "National Vulnerability Database".
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197536150📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0955 ‼
📖 Read
via "National Vulnerability Database".
In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-192085766📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1043 ‼
📖 Read
via "National Vulnerability Database".
In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194697257References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0927 ‼
📖 Read
via "National Vulnerability Database".
In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-8.1 Android-9Android ID: A-189824175📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0986 ‼
📖 Read
via "National Vulnerability Database".
In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-192247339📖 Read
via "National Vulnerability Database".
‼ CVE-2021-39657 ‼
📖 Read
via "National Vulnerability Database".
In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194696049References: Upstream kernel📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1027 ‼
📖 Read
via "National Vulnerability Database".
In setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a privileged process due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193033243📖 Read
via "National Vulnerability Database".
‼ CVE-2021-45078 ‼
📖 Read
via "National Vulnerability Database".
stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0926 ‼
📖 Read
via "National Vulnerability Database".
In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-191053931📖 Read
via "National Vulnerability Database".
‼ CVE-2021-39655 ‼
📖 Read
via "National Vulnerability Database".
Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A📖 Read
via "National Vulnerability Database".