CVE-2021-0557

CVE-2021-0557 affects Android 11 in the Media Framework component, specifically a vulnerability in the function setRange() of ABuffer.cpp. An integer overflow can cause an out-of-bounds write, which could enable remote code execution with no extra privileges, requiring user interaction to exploit...

CVE-2021-0565

In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2021-0572

In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...

CVE-2021-0569

In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2021-0570

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0570

The CVE-2021-0570 entry maps to an elevation-of-privilege issue in Android 11’s BugreportProgressService.sendBugreportNotification caused by an unsafe PendingIntent. This can bypass privileges locally without user interaction, as vendor records and the Pixel update bulletin note patches for Andro...

CVE-2021-0567

CVE-2021-0567 affects Android 11, where isRestricted in RemoteViews.java can be bypassed to inject font files, enabling local escalation of privilege with no additional privileges or user interaction. The vulnerability is categorized as Elevation of Privilege (EoP). In public advisories, patches ...

CVE-2021-0534

In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0534

CVE-2021-0534 affects Android 11, stemming from an insecure default in DeviceAdminReceiver.java permission declarations, which can allow local privilege escalation without extra privileges or user interaction. The issue’s root cause is lack of broadcast protection due to insufficient default prot...

CVE-2021-0571

In ActivityTaskManagerService.startActivity and AppTaskImpl.startActivity of ActivityTaskManagerService.java and AppTaskImpl.java, there is possible access to restricted activities due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privilege...

CVE-2021-0555

In RenderStruct of protostreamobjectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

PT-2021-13195

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible out of bounds write due to a missing bounds check in the rw i93 send to lower function of rw i93.cc. This could lead to local escalation of privilege with no addition...

PT-2021-13206

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to an incorrect bounds check in the RasterIntraUpdate function of motion est.cpp, which could lead to a possible out of bounds read. This might result in local information disclosu...

PT-2021-13201

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a missing null check in the RenderStruct of protostream objectsource.cc, which could lead to a crash. This could result in a remote denial of service, and no additional executio...

PT-2021-13198

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to improper input validation in the MediaControlPanel.java, which can be exploited using a malicious media file. This could lead to a remote denial of service, with no additional...

PT-2021-13204

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible out of bounds read due to a heap buffer overflow in the fillMainDataBuf function of pvmp3 framedecoder.cpp. This could lead to remote information disclosure with no...

PT-2021-13191

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible out of bounds write in the phNxpNciHal print res status function of phNxpNciHal.cc due to a missing bounds check. This could lead to local escalation of privilege wit...

PT-2021-13190

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In the phNxpNciHal process ext rsp function of phNxpNciHal ext.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System...

PT-2021-13209

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible out of bounds read in the accessAudioHalPidscpp function of TimeCheck.cpp due to a missing bounds check. This could lead to local information disclosure, requiring...

PT-2021-13197

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a confused deputy in the onLoadFailed method of AnnotateActivity.java, which could allow gaining WRITE EXTERNAL STORAGE permissions without user consent. This could lead to loca...