|
195701
|
5.0 |
MEDIUM
Local
|
google
|
android
|
In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is n…
|
CWE-834
Excessive Iteration
|
CVE-2021-0687
|
2024-11-21 14:43 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195702
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead …
|
CWE-862
Missing Authorization
|
CVE-2021-0686
|
2024-11-21 14:43 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195703
|
7.8 |
HIGH
Local
|
google
|
android
|
In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to unsafe deserialization. This could lead to local escalation of privilege with no…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2021-0685
|
2024-11-21 14:43 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195704
|
7.8 |
HIGH
Local
|
google
|
android
|
In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privi…
|
CWE-416
Use After Free
|
CVE-2021-0684
|
2024-11-21 14:43 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195705
|
7.8 |
HIGH
Local
|
google
|
android
|
In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional exec…
|
NVD-CWE-Other
|
CVE-2021-0683
|
2024-11-21 14:43 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195706
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to local information disclosure wi…
|
CWE-862
Missing Authorization
|
CVE-2021-0682
|
2024-11-21 14:43 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195707
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Use…
|
CWE-862
Missing Authorization
|
CVE-2021-0681
|
2024-11-21 14:43 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195708
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Use…
|
CWE-862
Missing Authorization
|
CVE-2021-0680
|
2024-11-21 14:43 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195709
|
5.5 |
MEDIUM
Local
|
google
|
android
|
In conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information di…
|
CWE-200
Information Exposure
|
CVE-2021-0644
|
2024-11-21 14:43 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195710
|
7.8 |
HIGH
Local
|
google
|
android
|
When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to h…
|
NVD-CWE-noinfo
|
CVE-2021-0636
|
2024-11-21 14:43 |
2021-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|