CVE-2021-0369: Undefined Security Weakness

In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACTACROSSPROFILES grant state not displaying properly in the setting UI due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2021-13055

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is related to a possible use of untrusted input due to improper input validation in DeltaPerformer::Write of delta performer.cc. This could lead to a local bypass of defense in depth protectio...

PT-2021-13050

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In the nci proc rf management ntf function of nci hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution...

PT-2021-13059

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass in the DeviceStorageMonitorService.java due to an unsafe PendingIntent. This could lead to local information disclosure, requiring User execution...

Huawei EulerOS: Security Advisory for flac (EulerOS-SA-2021-1557)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Android Android runtime elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Android runtime component of Google Android 11. An attacker can exploit the vulnerability to cause a local...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android 11 suffers from an elevation of privilege vulnerability. The vulnerability stems from an out-of-bounds read due to improper boundary checking in nciprocrfmanagementntf in...

Google Android 资源管理错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Android runtime component of Google Android 11. An attacker can exploit the vulnerability to cause a local...

PT-2021-13073

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to possible memory corruption due to a use after free in the StopServicesAndLogViolations function of reboot.cpp. This could lead to local escalation of privilege with no additiona...

PT-2021-13076

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: In the bindServiceLocked function of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution...

CVE-2021-0367

In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID:...

CVE-2021-0404

In mobilelogd, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039...

CVE-2021-0404

In mobilelogd, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039...

CVE-2021-0403

In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05475124...

CVE-2021-0406

In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS0547141...

Information disclosure

In mobilelogd, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039...

Out-of-bounds

In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS0547141...

Out-of-bounds

In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311...

Information disclosure

In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05475124...

CVE-2021-0366

In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID:...