CVE-2021-0928
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | test-poc | 9 Jun 202617:53 | – | githubexploit |
 | CVE-2021-0928 | 15 Dec 202119:15 | – | attackerkb |
 | Android Security Bulletin—November 2021Stay organized with collectionsSave and categorize content based on your preferences. | 1 Nov 202100:00 | – | androidsecurity |
 | CVE-2021-0928 | 29 Jan 202210:17 | – | circl |
 | Google Android code vulnerabilities | 1 Nov 202100:00 | – | cnnvd |
 | Google Android Media Framework Elevation of Privilege Vulnerability (CNVD-2021-101438) | 2 Nov 202100:00 | – | cnvd |
 | CVE-2021-0928 | 15 Dec 202118:05 | – | cvelist |
 | EUVD-2021-3547 | 3 Oct 202520:07 | – | euvd |
 | ReparcelBug2 | 31 Oct 202606:07 | – | kitploit |
 | CVE-2021-0928 | 15 Dec 202118:05 | – | mend |
10
[
{
"product": "Android",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Android-10 Android-11 Android-9"
}
]
}
]| Source | Link |
|---|---|
| source | www.source.android.com/security/bulletin/2021-11-01 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| mClipData | request body | Intent | A parcel serialization/deserialization mismatch in OutputConfiguration.java allows an attacker to inject a crafted Intent. By nesting a faulty Parcelable (OutputConfiguration) within the Intent's ClipData, the attacker can cause the system_server to misinterpret subsequent parameters, leading to the loading of an attacker-controlled class via a manipulated ApplicationInfo object. | CWE-20, CWE-755 |
| mActivityInfo | request body | Intent | A parcel serialization/deserialization mismatch in OutputConfiguration.java allows an attacker to inject a crafted Intent. By nesting a faulty Parcelable (OutputConfiguration) within the Intent's ClipData, the attacker can cause the system_server to misinterpret subsequent parameters, leading to the loading of an attacker-controlled class via a manipulated ApplicationInfo object. | CWE-20, CWE-755 |
| applicationInfo | request body | Intent | A parcel serialization/deserialization mismatch in OutputConfiguration.java allows an attacker to inject a crafted Intent. By nesting a faulty Parcelable (OutputConfiguration) within the Intent's ClipData, the attacker can cause the system_server to misinterpret subsequent parameters, leading to the loading of an attacker-controlled class via a manipulated ApplicationInfo object. | CWE-20, CWE-755 |
| splitDependencies | request body | Intent | A parcel serialization/deserialization mismatch in OutputConfiguration.java allows an attacker to inject a crafted Intent. By nesting a faulty Parcelable (OutputConfiguration) within the Intent's ClipData, the attacker can cause the system_server to misinterpret subsequent parameters, leading to the loading of an attacker-controlled class via a manipulated ApplicationInfo object. | CWE-20, CWE-755 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 03:30Current
7.7High risk
Vulners AI Score7.7
CVSS 27.2
CVSS 3.17.8
EPSS0.00376