Lucene search
Google_androidCVELIST:CVE-2021-0933HistoryDec 15, 2021 - 6:05 p.m.
CVE-2021-0933
2021-12-1518:05:18
google_android
www.cve.org
9
html tags
companiondeviceactivity
devicechooseractivity
oncreate
remote escalation
bluetooth device
user interaction
privilege escalation
EPSS
0.001
Percentile
21.5%
In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to remote escalation of privilege, confusing the user into accepting pairing of a malicious Bluetooth device, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-172251622
CNA Affected
[
{
"product": "Android",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Android-10 Android-11 Android-12 Android-9"
}
]
}
]Related
osv
osv
[HTML Injection in CompanionDeviceManager#DeviceChooserActivity]
2021-11-01 00:00:00
cnvd
cnvd
prion
prion
Input validation
2021-12-15 19:15:00
nvd
nvd
CVE-2021-0933
2021-12-15 19:15:11
cve
cve
CVE-2021-0933
2021-12-15 19:15:11
ics
ics
Siemens SIMATIC
2024-03-14 12:00:00