CVE-2021-0443

CVE-2021-0443 : Apple Android flaw affecting ScreenshotHelper.java and related files where a race condition can cause an incorrectly saved screenshot, enabling local information disclosure across user profiles. Exploitation requires user interaction; impact is information disclosure with no extra...

CVE-2021-0446: Improper Restriction of Rendered UI Layers or Frames

In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-17225212...

Google Android Framework elevation of privilege vulnerability (CNVD-2021-29050)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 11. No details of the vulnerability are provided at this time...

Google Android Framework elevation of privilege vulnerability (CNVD-2021-29049)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 11. No details of the vulnerability are provided at this time...

Google Android Framework elevation of privilege vulnerability (CNVD-2021-28302)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 11. No details of the vulnerability are provided at this time...

Google Android System elevation of privilege vulnerability (CNVD-2021-29044)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android 11. No details of the vulnerability are provided at this time...

Google Android Framework elevation of privilege vulnerability (CNVD-2021-29048)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 11. No details of the vulnerability are provided at this time...

Google Android 缓冲区错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 11. No details of the vulnerability are provided at this time...

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. No details of the vulnerability are provided at this ti...

Google Android 资源管理错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 11. No details of the vulnerability are provided at this time...

Google Android 缓冲区错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. No details of the vulnerability are provided at this ti...

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android 11. No details of the vulnerability are provided at this time...

PT-2021-13116

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible out of bounds write in the setPowerModeWithHandle function of com android server power PowerManagerService.cpp. This is due to a missing bounds check, which could lea...

PT-2021-13103

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In the parsePrimaryFieldFirstUidAnnotation function of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no...

PT-2021-13109

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In the ClearPullerCacheIfNecessary and ForceClearPullerCache functions of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of...

PT-2021-13104

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a heap buffer overflow in the parseExclusiveStateAnnotation function of LogEvent.cpp. This could lead to a local escalation of privilege with no additional execution privileges...

CVE-2021-0389

In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168039904...

CVE-2021-0386

In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-17342111...

CVE-2021-0382

In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

CVE-2021-0379

In getUpTo17bits of pvmp3getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...