Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0290.

Improper Handling of Exceptional Conditions in Ethernet interface frame processing of Juniper Networks Junos OS allows an attacker to send specially crafted frames over the local Ethernet segment, causing the interface to go into a down state, resulting in a Denial of Service (DoS) condition. The interface does not recover on its own and the FPC must be reset manually. Continued receipt and processing of these frames will create a sustained Denial of Service (DoS) condition. This issue is platform-specific and affects the following platforms and line cards: * MPC7E/8E/9E and MPC10E on MX240, MX480, MX960, MX2008, MX2010, and MX2020 * MX204, MX10003, MX10008, MX10016 * EX9200, EX9251 * SRX4600 No other products or platforms are affected by this vulnerability. An indication of this issue occurring can be seen in the system log messages, as shown below: user@host> show log messages | match "Failed to complete DFE tuning" fpc4 smic_phy_dfe_tuning_state: et-4/1/6 - Failed to complete DFE tuning (count 3) and interface will be in a permanently down state: user@host> show interfaces et-4/1/6 terse Interface Admin Link Proto Local Remote et-4/1/6 up down et-4/1/6.0 up down aenet --> ae101.0 This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S7 on MX Series; 17.1R1 and later versions prior to 17.2R3-S3 on MX Series; 17.3 versions prior to 17.3R3-S8 on MX Series; 17.4 versions prior to 17.4R2-S11, 17.4R3-S1 on MX Series, SRX4600; 18.1 versions prior to 18.1R3-S10 on MX Series, EX9200 Series, SRX4600; 18.2 versions prior to 18.2R3-S3 on MX Series, EX9200 Series, SRX4600; 18.3 versions prior to 18.3R3-S1 on MX Series, EX9200 Series, SRX4600; 18.4 versions prior to 18.4R2-S3, 18.4R3 on MX Series, EX9200 Series, SRX4600; 19.1 versions prior to 19.1R2-S1, 19.1R3 on MX Series, EX9200 Series, SRX4600; 19.2 versions prior to 19.2R1-S3, 19.2R2 on MX Series, EX9200 Series, SRX4600; 19.3 versions prior to 19.3R2 on MX Series, EX9200 Series, SRX4600. This issue does not affect Juniper Networks Junos OS versions prior to 16.1R1.


Provide references for further information: Can you share references or external links related to CVE-2021-0290?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11192'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0290?


Explain the CVE ID: What does the identifier CVE-2021-0291 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0291.

An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a network-based unauthenticated attacker to send specific traffic which partially reaches this resource. A high rate of specific traffic may lead to a partial Denial of Service (DoS) as the CPU utilization of the RE is significantly increased. The SNMP Agent Extensibility (agentx) process should only be listening to TCP port 705 on the internal routing instance. External connections destined to port 705 should not be allowed. This issue affects: Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R2-S13, 17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R2-S8; 19.1 versions prior to 19.1R3-S5; 19.2 versions prior to 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R2. Juniper Networks Junos OS Evolved versions prior to 20.3R2-EVO. This issue does not affect Juniper Networks Junos OS versions prior to 13.2R1.


Provide references for further information: Can you share references or external links related to CVE-2021-0291?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11193'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0291?


Explain the CVE ID: What does the identifier CVE-2021-0292 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0292.

An Uncontrolled Resource Consumption vulnerability in the ARP daemon (arpd) and Network Discovery Protocol (ndp) process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service (DoS) condition. Link-layer functions such as IPv4 and/or IPv6 address resolution may be impacted, leading to traffic loss. The processes do not recover on their own and must be manually restarted. Changes in memory usage can be monitored using the following shell commands (header shown for clarity): user@router:/var/log# ps aux | grep arpd USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 31418 59.0 0.7 *5702564* 247952 ? xxx /usr/sbin/arpd --app-name arpd -I object_select --shared-objects-mode 3 user@router:/var/log# ps aux | grep arpd USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 31418 49.1 1.0 *5813156* 351184 ? xxx /usr/sbin/arpd --app-name arpd -I object_select --shared-objects-mode 3 Memory usage can be monitored for the ndp process in a similar fashion: user@router:/var/log# ps aux | grep ndp USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 14935 0.0 0.1 *5614052* 27256 ? Ssl Jun15 0:17 /usr/sbin/ndp -I no_tab_chk,object_select --app-name ndp --shared-obje user@router:/var/log# ps aux | grep ndp USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 14935 0.0 0.1 *5725164* 27256 ? Ssl Jun15 0:17 /usr/sbin/ndp -I no_tab_chk,object_select --app-name ndp --shared-obje This issue affects Juniper Networks Junos OS Evolved: 19.4 versions prior to 19.4R2-S3-EVO; 20.1 versions prior to 20.1R2-S4-EVO; all versions of 20.2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 19.4R2-EVO.


Provide references for further information: Can you share references or external links related to CVE-2021-0292?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11194'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0292?


Explain the CVE ID: What does the identifier CVE-2021-0293 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0293.

A vulnerability in Juniper Networks Junos OS caused by Missing Release of Memory after Effective Lifetime leads to a memory leak each time the CLI command 'show system connections extensive' is executed. The amount of memory leaked on each execution depends on the number of TCP connections from and to the system. Repeated execution will cause more memory to leak and eventually daemons that need to allocate additionally memory and ultimately the kernel to crash, which will result in traffic loss. Continued execution of this command will cause a sustained Denial of Service (DoS) condition. An administrator can use the following CLI command to monitor for increase in memory consumption of the netstat process, if it exists: user@junos> show system processes extensive | match "username|netstat" PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND 21181 root 100 0 5458M 4913M CPU3 2 0:59 97.27% netstat The following log message might be observed if this issue happens: kernel: %KERN-3: pid 21181 (netstat), uid 0, was killed: out of swap space This issue affects Juniper Networks Junos OS 18.2 versions prior to 18.2R2-S8, 18.2R3-S7. 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S6, 18.4R3-S7; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R1-S4, 19.4R2-S3, 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2-S1, 20.2R3; 20.3 versions prior to 20.3R1-S1, 20.3R2; This issue does not affect Juniper Networks Junos OS versions prior to 18.2R1.


Provide references for further information: Can you share references or external links related to CVE-2021-0293?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11195'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0293?


Explain the CVE ID: What does the identifier CVE-2021-0294 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0294.

A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Networks Junos QFX5000 Series and EX4600 Series, and if "storm-control enhanced" is configured, can lead to the enhanced storm control filter group not be installed. It will cause storm control not to work hence allowing an attacker to cause high CPU usage or packet loss issues by sending a large amount of broadcast or unknown unicast packets arriving the device. This issue affects Juniper Networks QFX5100, QFX5110, QFX5120, QFX5200, QFX5210, EX4600, and EX4650, and QFX5100 with QFX 5e Series image installed. QFX5130 and QFX5220 are not affected from this issue. This issue affects Juniper Networks Junos OS 18.4R2-S5 on QFX5000 Series and EX4600 Series. No other product or platform is affected by this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2021-0294?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11196'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0294?


Explain the CVE ID: What does the identifier CVE-2021-0295 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0295.

A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trigger a packet forwarding loop, leading to a partial Denial of Service (DoS). The issue is caused by DVMRP packets looping on a multi-homed Ethernet Segment Identifier (ESI) when VXLAN is configured. DVMRP packets received on a multi-homed ESI are sent to the peer, and then incorrectly forwarded out the same ESI, violating the split horizon rule. This issue only affects QFX10K Series switches, including the QFX10002, QFX10008, and QFX10016. Other products and platforms are unaffected by this vulnerability. This issue affects Juniper Networks Junos OS on QFX10K Series: 17.3 versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R3-S5; 18.1 versions prior to 18.1R3-S13; 18.2 version 18.2R1 and later versions; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R2-S9, 18.4R3-S8; 19.1 versions prior to 19.1R3-S5; 19.2 versions prior to 19.2R1-S7, 19.2R3-S2; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0295?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11208'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0295?


Explain the CVE ID: What does the identifier CVE-2021-0296 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0296.

The Juniper Networks CTPView server is not enforcing HTTP Strict Transport Security (HSTS). HSTS is an optional response header which allows servers to indicate that content from the requested domain will only be served over HTTPS. The lack of HSTS may leave the system vulnerable to downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hijacking protections. This issue affects Juniper Networks CTPView: 7.3 versions prior to 7.3R7; 9.1 versions prior to 9.1R3.


Provide references for further information: Can you share references or external links related to CVE-2021-0296?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11210'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0296?


Explain the CVE ID: What does the identifier CVE-2021-0297 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0297.

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being established, resulting in an impact on confidentiality or stability of the network. This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.3R2-S1-EVO; 20.4 versions prior to 20.4R2-EVO; 21.1 versions prior to 21.1R2-EVO. Juniper Networks Junos OS is not affected by this issue.


Provide references for further information: Can you share references or external links related to CVE-2021-0297?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11211'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0297?


Explain the CVE ID: What does the identifier CVE-2021-0298 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0298.

A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (picd) process on the FPC, if the command is executed coincident with other system events outside the attacker's control, leading to a Denial of Service (DoS) condition. Continued execution of the CLI command, under precise conditions, could create a sustained Denial of Service (DoS) condition. This issue affects all Juniper Networks Junos OS Evolved versions prior to 20.1R2-EVO on PTX10003 and PTX10008 platforms. Junos OS is not affected by this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2021-0298?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11212'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0298?


Explain the CVE ID: What does the identifier CVE-2021-0299 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0299.

An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Networks Junos OS results in a kernel crash, causing the device to restart, leading to a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue only affects systems with IPv6 configured. Devices with only IPv4 configured are not vulnerable to this issue. This issue affects Juniper Networks Junos OS: 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 19.4R1.


Provide references for further information: Can you share references or external links related to CVE-2021-0299?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11213'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0299?


Explain the CVE ID: What does the identifier CVE-2021-0301 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0301.

In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android SoC; Android ID: A-172514667.


Provide references for further information: Can you share references or external links related to CVE-2021-0301?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2021-01-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0301?


Explain the CVE ID: What does the identifier CVE-2021-0302 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0302.

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-155287782


Provide references for further information: Can you share references or external links related to CVE-2021-0302?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-02-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0302?


Explain the CVE ID: What does the identifier CVE-2021-0303 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0303.

In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Android ID: A-170407229.


Provide references for further information: Can you share references or external links related to CVE-2021-0303?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0303?


Explain the CVE ID: What does the identifier CVE-2021-0304 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0304.

In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of the user's contacts with User execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-8.0, Android-8.1, Android-9; Android ID: A-162738636.


Provide references for further information: Can you share references or external links related to CVE-2021-0304?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0304?


Explain the CVE ID: What does the identifier CVE-2021-0305 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0305.

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-154015447


Provide references for further information: Can you share references or external links related to CVE-2021-0305?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0305?


Explain the CVE ID: What does the identifier CVE-2021-0306 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0306.

In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an app to gain the android.permission.ACTIVITY_RECOGNITION permission without user confirmation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11, Android-8.0, Android-8.1, Android-9, Android-10; Android ID: A-154505240.


Provide references for further information: Can you share references or external links related to CVE-2021-0306?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0306?


Explain the CVE ID: What does the identifier CVE-2021-0307 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0307.

In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. This could lead to local escalation of privilege allowing a malicious app to silently gain access to a dangerous permission with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Android ID: A-155648771.


Provide references for further information: Can you share references or external links related to CVE-2021-0307?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0307?


Explain the CVE ID: What does the identifier CVE-2021-0308 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0308.

In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158063095.


Provide references for further information: Can you share references or external links related to CVE-2021-0308?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2021-01-01'}, {'name': '[debian-lts-announce] 20210208 [SECURITY] [DLA 2549-1] gdisk security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html'}, {'name': 'GLSA-202105-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202105-03'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0308?


Explain the CVE ID: What does the identifier CVE-2021-0309 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0309.

In onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to local information disclosure and account access with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158480899.


Provide references for further information: Can you share references or external links related to CVE-2021-0309?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0309?


Explain the CVE ID: What does the identifier CVE-2021-0310 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0310.

In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Android ID: A-170212632.


Provide references for further information: Can you share references or external links related to CVE-2021-0310?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0310?


Explain the CVE ID: What does the identifier CVE-2021-0311 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0311.

In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170240631.


Provide references for further information: Can you share references or external links related to CVE-2021-0311?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0311?


Explain the CVE ID: What does the identifier CVE-2021-0312 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0312.

In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-170583712.


Provide references for further information: Can you share references or external links related to CVE-2021-0312?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0312?


Explain the CVE ID: What does the identifier CVE-2021-0313 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0313.

In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170968514.


Provide references for further information: Can you share references or external links related to CVE-2021-0313?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0313?


Explain the CVE ID: What does the identifier CVE-2021-0314 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0314.

In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-171221302


Provide references for further information: Can you share references or external links related to CVE-2021-0314?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0314?


Explain the CVE ID: What does the identifier CVE-2021-0315 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0315.

In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-169763814.


Provide references for further information: Can you share references or external links related to CVE-2021-0315?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2021-01-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0315?


Explain the CVE ID: What does the identifier CVE-2021-0316 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0316.

In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11, Android-8.0, Android-8.1, Android-9, Android-10; Android ID: A-168802990.


Provide references for further information: Can you share references or external links related to CVE-2021-0316?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0316?


Explain the CVE ID: What does the identifier CVE-2021-0317 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0317.

In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10, Android-11, Android-8.0, Android-8.1, Android-9; Android ID: A-168319670.


Provide references for further information: Can you share references or external links related to CVE-2021-0317?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0317?


Explain the CVE ID: What does the identifier CVE-2021-0318 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0318.

In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-8.1, Android-10, Android-11; Android ID: A-168211968.


Provide references for further information: Can you share references or external links related to CVE-2021-0318?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0318?


Explain the CVE ID: What does the identifier CVE-2021-0319 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0319.

In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate permissions due to a permissions bypass. This could lead to local escalation of privilege that grants access to nearby MAC addresses, with User execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-167244818.


Provide references for further information: Can you share references or external links related to CVE-2021-0319?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0319?


Explain the CVE ID: What does the identifier CVE-2021-0320 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0320.

In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Android ID: A-169933423.


Provide references for further information: Can you share references or external links related to CVE-2021-0320?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0320?


Explain the CVE ID: What does the identifier CVE-2021-0321 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0321.

In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is installed due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Android ID: A-166667403.


Provide references for further information: Can you share references or external links related to CVE-2021-0321?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0321?


Explain the CVE ID: What does the identifier CVE-2021-0322 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0322.

In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: Android; Versions: Android-10, Android-11, Android-9; Android ID: A-159145361.


Provide references for further information: Can you share references or external links related to CVE-2021-0322?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0322?


Explain the CVE ID: What does the identifier CVE-2021-0324 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0324.

Product: AndroidVersions: Android SoCAndroid ID: A-175402462


Provide references for further information: Can you share references or external links related to CVE-2021-0324?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-05-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0324?


Explain the CVE ID: What does the identifier CVE-2021-0325 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0325.

In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-174238784


Provide references for further information: Can you share references or external links related to CVE-2021-0325?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-02-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0325?


Explain the CVE ID: What does the identifier CVE-2021-0326 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0326.

In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525


Provide references for further information: Can you share references or external links related to CVE-2021-0326?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-02-01'}, {'name': 'FEDORA-2021-1a2443baa0', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMHPFCON6ZFCGZXSASJFKQ3UX2UIYMND/'}, {'name': '[debian-lts-announce] 20210220 [SECURITY] [DLA 2572-1] wpa security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2021/02/msg00033.html'}, {'name': 'FEDORA-2021-defe51d282', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOSA6DZUDLVOCYJNNXD6V3MRBVLCXZFH/'}, {'name': 'DSA-4898', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4898'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0326?


Explain the CVE ID: What does the identifier CVE-2021-0327 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0327.

In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-172935267


Provide references for further information: Can you share references or external links related to CVE-2021-0327?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0327?


Explain the CVE ID: What does the identifier CVE-2021-0328 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0328.

In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172670415


Provide references for further information: Can you share references or external links related to CVE-2021-0328?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0328?


Explain the CVE ID: What does the identifier CVE-2021-0329 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0329.

In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-171400004


Provide references for further information: Can you share references or external links related to CVE-2021-0329?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0329?


Explain the CVE ID: What does the identifier CVE-2021-0330 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0330.

In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in storaged with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-170732441


Provide references for further information: Can you share references or external links related to CVE-2021-0330?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0330?


Explain the CVE ID: What does the identifier CVE-2021-0331 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0331.

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local escalation of privilege and notification access with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-170731783


Provide references for further information: Can you share references or external links related to CVE-2021-0331?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0331?


Explain the CVE ID: What does the identifier CVE-2021-0332 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0332.

In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-169256435


Provide references for further information: Can you share references or external links related to CVE-2021-0332?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0332?


Explain the CVE ID: What does the identifier CVE-2021-0333 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0333.

In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-168504491


Provide references for further information: Can you share references or external links related to CVE-2021-0333?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0333?


Explain the CVE ID: What does the identifier CVE-2021-0334 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0334.

In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-163358811


Provide references for further information: Can you share references or external links related to CVE-2021-0334?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0334?


Explain the CVE ID: What does the identifier CVE-2021-0335 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0335.

In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160346309


Provide references for further information: Can you share references or external links related to CVE-2021-0335?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0335?


Explain the CVE ID: What does the identifier CVE-2021-0336 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0336.

In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-158219161


Provide references for further information: Can you share references or external links related to CVE-2021-0336?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0336?


Explain the CVE ID: What does the identifier CVE-2021-0337 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0337.

In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-157474195


Provide references for further information: Can you share references or external links related to CVE-2021-0337?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0337?


Explain the CVE ID: What does the identifier CVE-2021-0338 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0338.

In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156260178


Provide references for further information: Can you share references or external links related to CVE-2021-0338?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0338?


Explain the CVE ID: What does the identifier CVE-2021-0339 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0339.

In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-145728687


Provide references for further information: Can you share references or external links related to CVE-2021-0339?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0339?


Explain the CVE ID: What does the identifier CVE-2021-0340 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0340.

In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-134155286


Provide references for further information: Can you share references or external links related to CVE-2021-0340?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-02-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0340?


Explain the CVE ID: What does the identifier CVE-2021-0341 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0341.

In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069


Provide references for further information: Can you share references or external links related to CVE-2021-0341?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0341?


Explain the CVE ID: What does the identifier CVE-2021-0342 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0342.

In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327.


Provide references for further information: Can you share references or external links related to CVE-2021-0342?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-01-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0342?


Explain the CVE ID: What does the identifier CVE-2021-0343 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0343.

In kisd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05449962.


Provide references for further information: Can you share references or external links related to CVE-2021-0343?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0343?


Explain the CVE ID: What does the identifier CVE-2021-0344 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0344.

In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05437558.


Provide references for further information: Can you share references or external links related to CVE-2021-0344?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0344?


Explain the CVE ID: What does the identifier CVE-2021-0345 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0345.

In mobile_log_d, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05432974.


Provide references for further information: Can you share references or external links related to CVE-2021-0345?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0345?


Explain the CVE ID: What does the identifier CVE-2021-0346 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0346.

In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580.


Provide references for further information: Can you share references or external links related to CVE-2021-0346?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0346?


Explain the CVE ID: What does the identifier CVE-2021-0347 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0347.

In ccu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05377188.


Provide references for further information: Can you share references or external links related to CVE-2021-0347?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0347?


Explain the CVE ID: What does the identifier CVE-2021-0348 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0348.

In vpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11; Patch ID: ALPS05349201.


Provide references for further information: Can you share references or external links related to CVE-2021-0348?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0348?


Explain the CVE ID: What does the identifier CVE-2021-0349 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0349.

In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11; Patch ID: ALPS05362646.


Provide references for further information: Can you share references or external links related to CVE-2021-0349?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0349?


Explain the CVE ID: What does the identifier CVE-2021-0350 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0350.

In ged, there is a possible system crash due to an improper input validation. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05342338.


Provide references for further information: Can you share references or external links related to CVE-2021-0350?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0350?


Explain the CVE ID: What does the identifier CVE-2021-0351 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0351.

In wlan driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05412917.


Provide references for further information: Can you share references or external links related to CVE-2021-0351?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0351?


Explain the CVE ID: What does the identifier CVE-2021-0352 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0352.

In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05453809.


Provide references for further information: Can you share references or external links related to CVE-2021-0352?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0352?


Explain the CVE ID: What does the identifier CVE-2021-0353 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0353.

In kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425247.


Provide references for further information: Can you share references or external links related to CVE-2021-0353?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0353?


Explain the CVE ID: What does the identifier CVE-2021-0354 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0354.

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05431161.


Provide references for further information: Can you share references or external links related to CVE-2021-0354?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0354?


Explain the CVE ID: What does the identifier CVE-2021-0355 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0355.

In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425581.


Provide references for further information: Can you share references or external links related to CVE-2021-0355?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0355?


Explain the CVE ID: What does the identifier CVE-2021-0356 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0356.

In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442014.


Provide references for further information: Can you share references or external links related to CVE-2021-0356?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0356?


Explain the CVE ID: What does the identifier CVE-2021-0357 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0357.

In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442002.


Provide references for further information: Can you share references or external links related to CVE-2021-0357?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0357?


Explain the CVE ID: What does the identifier CVE-2021-0358 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0358.

In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442022.


Provide references for further information: Can you share references or external links related to CVE-2021-0358?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0358?


Explain the CVE ID: What does the identifier CVE-2021-0359 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0359.

In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442011.


Provide references for further information: Can you share references or external links related to CVE-2021-0359?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0359?


Explain the CVE ID: What does the identifier CVE-2021-0360 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0360.

In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442006.


Provide references for further information: Can you share references or external links related to CVE-2021-0360?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0360?


Explain the CVE ID: What does the identifier CVE-2021-0361 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0361.

In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05449968.


Provide references for further information: Can you share references or external links related to CVE-2021-0361?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0361?


Explain the CVE ID: What does the identifier CVE-2021-0362 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0362.

In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457070.


Provide references for further information: Can you share references or external links related to CVE-2021-0362?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0362?


Explain the CVE ID: What does the identifier CVE-2021-0363 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0363.

In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05458478.


Provide references for further information: Can you share references or external links related to CVE-2021-0363?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0363?


Explain the CVE ID: What does the identifier CVE-2021-0364 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0364.

In mobile_log_d, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05458478; Issue ID: ALPS05458503.


Provide references for further information: Can you share references or external links related to CVE-2021-0364?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0364?


Explain the CVE ID: What does the identifier CVE-2021-0365 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0365.

In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05454782.


Provide references for further information: Can you share references or external links related to CVE-2021-0365?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0365?


Explain the CVE ID: What does the identifier CVE-2021-0366 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0366.

In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379093.


Provide references for further information: Can you share references or external links related to CVE-2021-0366?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0366?


Explain the CVE ID: What does the identifier CVE-2021-0367 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0367.

In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379085.


Provide references for further information: Can you share references or external links related to CVE-2021-0367?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0367?


Explain the CVE ID: What does the identifier CVE-2021-0368 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0368.

In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169829774


Provide references for further information: Can you share references or external links related to CVE-2021-0368?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0368?


Explain the CVE ID: What does the identifier CVE-2021-0369 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0369.

In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state not displaying properly in the setting UI due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-166561076


Provide references for further information: Can you share references or external links related to CVE-2021-0369?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0369?


Explain the CVE ID: What does the identifier CVE-2021-0370 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0370.

In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169259605


Provide references for further information: Can you share references or external links related to CVE-2021-0370?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0370?


Explain the CVE ID: What does the identifier CVE-2021-0371 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0371.

In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-164440989


Provide references for further information: Can you share references or external links related to CVE-2021-0371?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0371?


Explain the CVE ID: What does the identifier CVE-2021-0372 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0372.

In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174047735


Provide references for further information: Can you share references or external links related to CVE-2021-0372?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0372?


Explain the CVE ID: What does the identifier CVE-2021-0374 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0374.

In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169572641


Provide references for further information: Can you share references or external links related to CVE-2021-0374?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0374?


Explain the CVE ID: What does the identifier CVE-2021-0375 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0375.

In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-167261484


Provide references for further information: Can you share references or external links related to CVE-2021-0375?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0375?


Explain the CVE ID: What does the identifier CVE-2021-0376 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0376.

In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-115619667


Provide references for further information: Can you share references or external links related to CVE-2021-0376?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0376?


Explain the CVE ID: What does the identifier CVE-2021-0377 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0377.

In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input validation. This could lead to a local bypass of defense in depth protections with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160800689


Provide references for further information: Can you share references or external links related to CVE-2021-0377?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0377?


Explain the CVE ID: What does the identifier CVE-2021-0378 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0378.

In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154076193


Provide references for further information: Can you share references or external links related to CVE-2021-0378?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0378?


Explain the CVE ID: What does the identifier CVE-2021-0379 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0379.

In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154075955


Provide references for further information: Can you share references or external links related to CVE-2021-0379?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0379?


Explain the CVE ID: What does the identifier CVE-2021-0380 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0380.

In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of privilege during the onboarding flow with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172459128


Provide references for further information: Can you share references or external links related to CVE-2021-0380?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0380?


Explain the CVE ID: What does the identifier CVE-2021-0381 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0381.

In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153466381


Provide references for further information: Can you share references or external links related to CVE-2021-0381?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0381?


Explain the CVE ID: What does the identifier CVE-2021-0382 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0382.

In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140727941


Provide references for further information: Can you share references or external links related to CVE-2021-0382?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0382?


Explain the CVE ID: What does the identifier CVE-2021-0383 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0383.

In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege in carrier settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160871056


Provide references for further information: Can you share references or external links related to CVE-2021-0383?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0383?


Explain the CVE ID: What does the identifier CVE-2021-0384 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0384.


Provide references for further information: Can you share references or external links related to CVE-2021-0384?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0384?


Explain the CVE ID: What does the identifier CVE-2021-0385 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0385.

In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to notification interaction above the lockscreen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172584372


Provide references for further information: Can you share references or external links related to CVE-2021-0385?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0385?


Explain the CVE ID: What does the identifier CVE-2021-0386 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0386.

In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173421110


Provide references for further information: Can you share references or external links related to CVE-2021-0386?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-03-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0386?


Explain the CVE ID: What does the identifier CVE-2021-0387 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0387.

In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169421939


Provide references for further information: Can you share references or external links related to CVE-2021-0387?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0387?


Explain the CVE ID: What does the identifier CVE-2021-0388 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0388.

In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could lead to local escalation of privilege resulting in attributing video call data to the wrong app, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162741489


Provide references for further information: Can you share references or external links related to CVE-2021-0388?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0388?


Explain the CVE ID: What does the identifier CVE-2021-0389 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0389.

In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168039904


Provide references for further information: Can you share references or external links related to CVE-2021-0389?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0389?


Explain the CVE ID: What does the identifier CVE-2021-0390 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0390.

In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174749461


Provide references for further information: Can you share references or external links related to CVE-2021-0390?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-03-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0390?


Explain the CVE ID: What does the identifier CVE-2021-0391 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0391.

In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172841550


Provide references for further information: Can you share references or external links related to CVE-2021-0391?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0391?


Explain the CVE ID: What does the identifier CVE-2021-0392 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0392.

In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-175124730


Provide references for further information: Can you share references or external links related to CVE-2021-0392?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0392?


Explain the CVE ID: What does the identifier CVE-2021-0393 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0393.

In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-168041375


Provide references for further information: Can you share references or external links related to CVE-2021-0393?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0393?


Explain the CVE ID: What does the identifier CVE-2021-0394 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0394.

In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172655291


Provide references for further information: Can you share references or external links related to CVE-2021-0394?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0394?


Explain the CVE ID: What does the identifier CVE-2021-0395 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0395.

In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170315126


Provide references for further information: Can you share references or external links related to CVE-2021-0395?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0395?


Explain the CVE ID: What does the identifier CVE-2021-0396 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0396.

In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-160610106


Provide references for further information: Can you share references or external links related to CVE-2021-0396?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0396?


Explain the CVE ID: What does the identifier CVE-2021-0397 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0397.

In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174052148


Provide references for further information: Can you share references or external links related to CVE-2021-0397?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0397?


Explain the CVE ID: What does the identifier CVE-2021-0398 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0398.

In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173516292


Provide references for further information: Can you share references or external links related to CVE-2021-0398?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0398?


Explain the CVE ID: What does the identifier CVE-2021-0399 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0399.

In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-176919394References: Upstream kernel


Provide references for further information: Can you share references or external links related to CVE-2021-0399?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0399?


Explain the CVE ID: What does the identifier CVE-2021-0400 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0400.

In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-177561690


Provide references for further information: Can you share references or external links related to CVE-2021-0400?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-04-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0400?


Explain the CVE ID: What does the identifier CVE-2021-0401 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0401.

In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05418265.


Provide references for further information: Can you share references or external links related to CVE-2021-0401?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-acknowledgements'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0401?


Explain the CVE ID: What does the identifier CVE-2021-0402 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0402.

In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311.


Provide references for further information: Can you share references or external links related to CVE-2021-0402?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0402?


Explain the CVE ID: What does the identifier CVE-2021-0403 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0403.

In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05475124.


Provide references for further information: Can you share references or external links related to CVE-2021-0403?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0403?


Explain the CVE ID: What does the identifier CVE-2021-0404 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0404.

In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039.


Provide references for further information: Can you share references or external links related to CVE-2021-0404?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0404?


Explain the CVE ID: What does the identifier CVE-2021-0405 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0405.

In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05466547.


Provide references for further information: Can you share references or external links related to CVE-2021-0405?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0405?


Explain the CVE ID: What does the identifier CVE-2021-0406 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0406.

In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05471418.


Provide references for further information: Can you share references or external links related to CVE-2021-0406?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0406?


Explain the CVE ID: What does the identifier CVE-2021-0407 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0407.

In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05479659; Issue ID: ALPS05479659.


Provide references for further information: Can you share references or external links related to CVE-2021-0407?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/August-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0407?


Explain the CVE ID: What does the identifier CVE-2021-0408 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0408.

In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489195; Issue ID: ALPS05489220.


Provide references for further information: Can you share references or external links related to CVE-2021-0408?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0408?


Explain the CVE ID: What does the identifier CVE-2021-0409 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0409.

In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561359; Issue ID: ALPS05561359.


Provide references for further information: Can you share references or external links related to CVE-2021-0409?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/October-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0409?


Explain the CVE ID: What does the identifier CVE-2021-0410 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0410.

In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561360; Issue ID: ALPS05561360.


Provide references for further information: Can you share references or external links related to CVE-2021-0410?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0410?


Explain the CVE ID: What does the identifier CVE-2021-0411 mean in the context of cybersecurity?