[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0354.

[Assistant] In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05431161.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0354?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0354?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0355 mean in the context of cybersecurity?

[Assistant] CVE-2021-0355


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0355.

[Assistant] In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425581.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0355?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0355?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0356 mean in the context of cybersecurity?

[Assistant] CVE-2021-0356


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0356.

[Assistant] In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442014.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0356?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0356?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0357 mean in the context of cybersecurity?

[Assistant] CVE-2021-0357


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0357.

[Assistant] In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442002.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0357?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0357?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0358 mean in the context of cybersecurity?

[Assistant] CVE-2021-0358


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0358.

[Assistant] In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442022.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0358?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0358?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0359 mean in the context of cybersecurity?

[Assistant] CVE-2021-0359


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0359.

[Assistant] In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442011.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0359?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0359?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0360 mean in the context of cybersecurity?

[Assistant] CVE-2021-0360


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0360.

[Assistant] In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442006.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0360?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0360?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0361 mean in the context of cybersecurity?

[Assistant] CVE-2021-0361


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0361.

[Assistant] In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05449968.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0361?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0361?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0362 mean in the context of cybersecurity?

[Assistant] CVE-2021-0362


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0362.

[Assistant] In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457070.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0362?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0362?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0363 mean in the context of cybersecurity?

[Assistant] CVE-2021-0363


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0363.

[Assistant] In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05458478.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0363?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0363?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0364 mean in the context of cybersecurity?

[Assistant] CVE-2021-0364


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0364.

[Assistant] In mobile_log_d, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05458478; Issue ID: ALPS05458503.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0364?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0364?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0365 mean in the context of cybersecurity?

[Assistant] CVE-2021-0365


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0365.

[Assistant] In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05454782.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0365?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0365?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0366 mean in the context of cybersecurity?

[Assistant] CVE-2021-0366


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0366.

[Assistant] In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379093.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0366?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0366?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0367 mean in the context of cybersecurity?

[Assistant] CVE-2021-0367


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0367.

[Assistant] In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379085.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0367?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0367?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0368 mean in the context of cybersecurity?

[Assistant] CVE-2021-0368


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0368.

[Assistant] In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169829774


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0368?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0368?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0369 mean in the context of cybersecurity?

[Assistant] CVE-2021-0369


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0369.

[Assistant] In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state not displaying properly in the setting UI due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-166561076


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0369?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0369?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0370 mean in the context of cybersecurity?

[Assistant] CVE-2021-0370


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0370.

[Assistant] In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169259605


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0370?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0370?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0371 mean in the context of cybersecurity?

[Assistant] CVE-2021-0371


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0371.

[Assistant] In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-164440989


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0371?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0371?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0372 mean in the context of cybersecurity?

[Assistant] CVE-2021-0372


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0372.

[Assistant] In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174047735


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0372?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0372?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0374 mean in the context of cybersecurity?

[Assistant] CVE-2021-0374


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0374.

[Assistant] In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169572641


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0374?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0374?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0375 mean in the context of cybersecurity?

[Assistant] CVE-2021-0375


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0375.

[Assistant] In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-167261484


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0375?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0375?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0376 mean in the context of cybersecurity?

[Assistant] CVE-2021-0376


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0376.

[Assistant] In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-115619667


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0376?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0376?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0377 mean in the context of cybersecurity?

[Assistant] CVE-2021-0377


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0377.

[Assistant] In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input validation. This could lead to a local bypass of defense in depth protections with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160800689


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0377?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0377?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0378 mean in the context of cybersecurity?

[Assistant] CVE-2021-0378


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0378.

[Assistant] In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154076193


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0378?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0378?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0379 mean in the context of cybersecurity?

[Assistant] CVE-2021-0379


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0379.

[Assistant] In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154075955


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0379?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0379?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0380 mean in the context of cybersecurity?

[Assistant] CVE-2021-0380


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0380.

[Assistant] In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of privilege during the onboarding flow with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172459128


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0380?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0380?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0381 mean in the context of cybersecurity?

[Assistant] CVE-2021-0381


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0381.

[Assistant] In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153466381


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0381?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0381?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0382 mean in the context of cybersecurity?

[Assistant] CVE-2021-0382


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0382.

[Assistant] In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140727941


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0382?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0382?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0383 mean in the context of cybersecurity?

[Assistant] CVE-2021-0383


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0383.

[Assistant] In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege in carrier settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160871056


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0383?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0383?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0384 mean in the context of cybersecurity?

[Assistant] CVE-2021-0384


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0384.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0384?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0384?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0385 mean in the context of cybersecurity?

[Assistant] CVE-2021-0385


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0385.

[Assistant] In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to notification interaction above the lockscreen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172584372


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0385?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0385?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0386 mean in the context of cybersecurity?

[Assistant] CVE-2021-0386


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0386.

[Assistant] In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173421110


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0386?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0386?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0387 mean in the context of cybersecurity?

[Assistant] CVE-2021-0387


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0387.

[Assistant] In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169421939


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0387?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0387?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0388 mean in the context of cybersecurity?

[Assistant] CVE-2021-0388


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0388.

[Assistant] In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could lead to local escalation of privilege resulting in attributing video call data to the wrong app, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162741489


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0388?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0388?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0389 mean in the context of cybersecurity?

[Assistant] CVE-2021-0389


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0389.

[Assistant] In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168039904


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0389?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0389?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0390 mean in the context of cybersecurity?

[Assistant] CVE-2021-0390


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0390.

[Assistant] In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174749461


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0390?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0390?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0391 mean in the context of cybersecurity?

[Assistant] CVE-2021-0391


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0391.

[Assistant] In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172841550


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0391?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0391?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0392 mean in the context of cybersecurity?

[Assistant] CVE-2021-0392


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0392.

[Assistant] In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-175124730


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0392?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0392?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0393 mean in the context of cybersecurity?

[Assistant] CVE-2021-0393


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0393.

[Assistant] In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-168041375


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0393?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0393?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0394 mean in the context of cybersecurity?

[Assistant] CVE-2021-0394


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0394.

[Assistant] In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172655291


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0394?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0394?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0395 mean in the context of cybersecurity?

[Assistant] CVE-2021-0395


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0395.

[Assistant] In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170315126


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0395?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0395?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0396 mean in the context of cybersecurity?

[Assistant] CVE-2021-0396


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0396.

[Assistant] In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-160610106


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0396?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0396?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0397 mean in the context of cybersecurity?

[Assistant] CVE-2021-0397


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0397.

[Assistant] In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174052148


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0397?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0397?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0398 mean in the context of cybersecurity?

[Assistant] CVE-2021-0398


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0398.

[Assistant] In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173516292


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0398?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0398?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0399 mean in the context of cybersecurity?

[Assistant] CVE-2021-0399


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0399.

[Assistant] In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-176919394References: Upstream kernel


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0399?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0399?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0400 mean in the context of cybersecurity?

[Assistant] CVE-2021-0400


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0400.

[Assistant] In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-177561690


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0400?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0400?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0401 mean in the context of cybersecurity?

[Assistant] CVE-2021-0401


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0401.

[Assistant] In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05418265.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0401?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0401?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0402 mean in the context of cybersecurity?

[Assistant] CVE-2021-0402


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0402.

[Assistant] In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0402?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0402?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0403 mean in the context of cybersecurity?

[Assistant] CVE-2021-0403


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0403.

[Assistant] In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05475124.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0403?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0403?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0404 mean in the context of cybersecurity?

[Assistant] CVE-2021-0404


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0404.

[Assistant] In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0404?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0404?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0405 mean in the context of cybersecurity?

[Assistant] CVE-2021-0405


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0405.

[Assistant] In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05466547.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0405?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0405?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0406 mean in the context of cybersecurity?

[Assistant] CVE-2021-0406


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0406.

[Assistant] In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05471418.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0406?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0406?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0407 mean in the context of cybersecurity?

[Assistant] CVE-2021-0407


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0407.

[Assistant] In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05479659; Issue ID: ALPS05479659.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0407?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/August-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0407?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0408 mean in the context of cybersecurity?

[Assistant] CVE-2021-0408


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0408.

[Assistant] In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489195; Issue ID: ALPS05489220.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0408?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/August-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0408?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0409 mean in the context of cybersecurity?

[Assistant] CVE-2021-0409


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0409.

[Assistant] In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561359; Issue ID: ALPS05561359.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0409?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/October-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0409?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0410 mean in the context of cybersecurity?

[Assistant] CVE-2021-0410


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0410.

[Assistant] In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561360; Issue ID: ALPS05561360.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0410?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/October-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0410?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0411 mean in the context of cybersecurity?

[Assistant] CVE-2021-0411


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0411.

[Assistant] In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561362; Issue ID: ALPS05561362.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0411?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/October-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0411?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0412 mean in the context of cybersecurity?

[Assistant] CVE-2021-0412


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0412.

[Assistant] In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561366; Issue ID: ALPS05561366.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0412?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/October-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0412?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0413 mean in the context of cybersecurity?

[Assistant] CVE-2021-0413


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0413.

[Assistant] In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561379; Issue ID: ALPS05561379.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0413?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/October-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0413?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0414 mean in the context of cybersecurity?

[Assistant] CVE-2021-0414


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0414.

[Assistant] In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561384; Issue ID: ALPS05561384.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0414?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/October-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0414?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0415 mean in the context of cybersecurity?

[Assistant] CVE-2021-0415


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0415.

[Assistant] In memory management driver, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336692.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0415?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/August-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0415?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0416 mean in the context of cybersecurity?

[Assistant] CVE-2021-0416


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0416.

[Assistant] In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336700.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0416?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/August-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0416?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0417 mean in the context of cybersecurity?

[Assistant] CVE-2021-0417


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0417.

[Assistant] In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336702.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0417?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/August-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0417?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0418 mean in the context of cybersecurity?

[Assistant] CVE-2021-0418


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0418.

[Assistant] In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336706.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0418?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/August-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0418?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0419 mean in the context of cybersecurity?

[Assistant] CVE-2021-0419


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0419.

[Assistant] In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336713.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0419?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/August-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0419?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0420 mean in the context of cybersecurity?

[Assistant] CVE-2021-0420


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0420.

[Assistant] In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05381065.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0420?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/August-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0420?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0421 mean in the context of cybersecurity?

[Assistant] CVE-2021-0421


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0421.

[Assistant] In memory management driver, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05381235.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0421?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/September-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0421?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0422 mean in the context of cybersecurity?

[Assistant] CVE-2021-0422


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0422.

[Assistant] In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05381071.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0422?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/September-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0422?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0423 mean in the context of cybersecurity?

[Assistant] CVE-2021-0423


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0423.

[Assistant] In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05385714.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0423?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/September-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0423?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0424 mean in the context of cybersecurity?

[Assistant] CVE-2021-0424


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0424.

[Assistant] In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05393787.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0424?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/September-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0424?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0425 mean in the context of cybersecurity?

[Assistant] CVE-2021-0425


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0425.

[Assistant] In memory management driver, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05400059.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0425?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/September-2021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0425?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0426 mean in the context of cybersecurity?

[Assistant] CVE-2021-0426


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0426.

[Assistant] In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174485572


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0426?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0426?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0427 mean in the context of cybersecurity?

[Assistant] CVE-2021-0427


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0427.

[Assistant] In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174488848


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0427?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0427?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0428 mean in the context of cybersecurity?

[Assistant] CVE-2021-0428


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0428.

[Assistant] In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-173421434


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0428?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-09-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0428?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0429 mean in the context of cybersecurity?

[Assistant] CVE-2021-0429


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0429.

[Assistant] In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-175074139


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0429?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0429?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0430 mean in the context of cybersecurity?

[Assistant] CVE-2021-0430


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0430.

[Assistant] In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution via a malicious NFC packet with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-178725766


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0430?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/162380/Android-NFC-Stack-Out-Of-Bounds-Write.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0430?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0431 mean in the context of cybersecurity?

[Assistant] CVE-2021-0431


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0431.

[Assistant] In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a paired device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174149901


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0431?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0431?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0432 mean in the context of cybersecurity?

[Assistant] CVE-2021-0432


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0432.

[Assistant] In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173552790


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0432?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0432?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0433 mean in the context of cybersecurity?

[Assistant] CVE-2021-0433


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0433.

[Assistant] In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171221090


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0433?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0433?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0434 mean in the context of cybersecurity?

[Assistant] CVE-2021-0434


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0434.

[Assistant] In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-167403112


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0434?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0434?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0435 mean in the context of cybersecurity?

[Assistant] CVE-2021-0435


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0435.

[Assistant] In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174150451


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0435?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0435?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0436 mean in the context of cybersecurity?

[Assistant] CVE-2021-0436


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0436.

[Assistant] In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496160


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0436?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0436?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0437 mean in the context of cybersecurity?

[Assistant] CVE-2021-0437


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0437.

[Assistant] In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176168330


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0437?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0437?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0438 mean in the context of cybersecurity?

[Assistant] CVE-2021-0438


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0438.

[Assistant] In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect FLAG_OBSCURED value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-152064592


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0438?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0438?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0439 mean in the context of cybersecurity?

[Assistant] CVE-2021-0439


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0439.

[Assistant] In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174243830


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0439?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0439?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0441 mean in the context of cybersecurity?

[Assistant] CVE-2021-0441


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0441.

[Assistant] In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174495520


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0441?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-07-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0441?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0442 mean in the context of cybersecurity?

[Assistant] CVE-2021-0442


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0442.

[Assistant] In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174768985


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0442?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0442?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0443 mean in the context of cybersecurity?

[Assistant] CVE-2021-0443


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0443.

[Assistant] In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-170474245


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0443?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0443?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0444 mean in the context of cybersecurity?

[Assistant] CVE-2021-0444


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0444.

[Assistant] In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-178825358


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0444?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0444?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0445 mean in the context of cybersecurity?

[Assistant] CVE-2021-0445


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0445.

[Assistant] In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9Android ID: A-172322502


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0445?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0445?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0446 mean in the context of cybersecurity?

[Assistant] CVE-2021-0446


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0446.

[Assistant] In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172252122


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-0446?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0446?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-0449 mean in the context of cybersecurity?

[Assistant] CVE-2021-0449