Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveGoogle_androidCVE-2021-0687
HistoryOct 06, 2021 - 3:15 p.m.

CVE-2021-0687

2021-10-0615:15:14
CWE-834
google_android
web.nvd.nist.gov
43
cve-2021-0687
anr
input validation
denial of service
android
nvd

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

AI Score

4.9

Confidence

High

EPSS

0

Percentile

5.1%

JSON

In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-188913943

Affected configurations

Nvd
Vulners
Node
googleandroidMatch8.1
OR
googleandroidMatch9.0
OR
googleandroidMatch10.0
OR
googleandroidMatch11.0
VendorProductVersionCPE
googleandroid8.1cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
googleandroid9.0cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*
googleandroid10.0cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
googleandroid11.0cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-9 Android-10 Android-11 Android-8.1"
      }
    ]
  }
]

Related

osv 1
nvd 1
cnvd 1
cvelist 1
prion 1
qualysblog 1
ics 1
osv
osv
Android 12 Beta- Denial Of Service
2021-09-01 00:00:00
nvd
nvd
CVE-2021-0687
2021-10-06 15:15:14
cnvd
cnvd
Google Android Denial of Service Vulnerability (CNVD-2021-78778)
2021-09-08 00:00:00
cvelist
cvelist
CVE-2021-0687
2021-10-06 14:11:57
prion
prion
Input validation
2021-10-06 15:15:00
qualysblog
qualysblog
Google Android September 2021 Security Patch Vulnerabilities: Discover and Take Remote Response Action Using VMDR for Mobile Devices
2021-09-20 14:45:13
ics
ics
Siemens SIMATIC
2024-03-14 12:00:00

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

AI Score

4.9

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2021-0687
osv1nvd1cnvd1cvelist1prion1qualysblog1ics1