Lucene search
Google_androidCVELIST:CVE-2021-0313HistoryJan 11, 2021 - 9:48 p.m.
CVE-2021-0313
2021-01-1121:48:30
google_android
www.cve.org
6
android
textview
denial of service
input validation
remote
exploitation
EPSS
0.001
Percentile
42.2%
In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170968514.
CNA Affected
[
{
"product": "Android",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Android-9"
},
{
"status": "affected",
"version": "Android-10"
},
{
"status": "affected",
"version": "Android-11"
},
{
"status": "affected",
"version": "Android-8.0"
},
{
"status": "affected",
"version": "Android-8.1"
}
]
}
]Related
prion
prion
Input validation
2021-01-11 22:15:00
nvd
nvd
CVE-2021-0313
2021-01-11 22:15:13
osv
osv
Dangerous Unicode text handling flaw
2021-01-01 00:00:00
cve
cve
CVE-2021-0313
2021-01-11 22:15:13
threatpost
threatpost
Google Warns of Critical Android Remote Code Execution Bug
2021-01-05 20:21:40