Lucene search
Google_androidCVELIST:CVE-2021-0594HistoryJul 14, 2021 - 1:44 p.m.
CVE-2021-0594
2021-07-1413:44:16
google_android
www.cve.org
2
android
confirmconnectactivity
remote bypass
EPSS
0.001
Percentile
20.2%
In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176445224
CNA Affected
[
{
"product": "Android",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Android-11 Android-8.1 Android-9 Android-10"
}
]
}
]Related
prion
prion
Input validation
2021-07-14 14:15:00
osv
osv
cve
cve
CVE-2021-0594
2021-07-14 14:15:08
nvd
nvd
CVE-2021-0594
2021-07-14 14:15:08
androidsecurity
androidsecurity
Android Security Bulletin—July 2021
2021-07-07 00:00:00
ics
ics
Siemens SIMATIC
2024-03-14 12:00:00