Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0552.

In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-175124820


Provide references for further information: Can you share references or external links related to CVE-2021-0552?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-06-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0552?


Explain the CVE ID: What does the identifier CVE-2021-0553 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0553.

In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169936038


Provide references for further information: Can you share references or external links related to CVE-2021-0553?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0553?


Explain the CVE ID: What does the identifier CVE-2021-0554 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0554.

In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158482162


Provide references for further information: Can you share references or external links related to CVE-2021-0554?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0554?


Explain the CVE ID: What does the identifier CVE-2021-0555 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0555.

In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179161711


Provide references for further information: Can you share references or external links related to CVE-2021-0555?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0555?


Explain the CVE ID: What does the identifier CVE-2021-0556 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0556.

In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172716941


Provide references for further information: Can you share references or external links related to CVE-2021-0556?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0556?


Explain the CVE ID: What does the identifier CVE-2021-0557 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0557.

In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179046129


Provide references for further information: Can you share references or external links related to CVE-2021-0557?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0557?


Explain the CVE ID: What does the identifier CVE-2021-0558 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0558.

In fillMainDataBuf of pvmp3_framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173473906


Provide references for further information: Can you share references or external links related to CVE-2021-0558?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0558?


Explain the CVE ID: What does the identifier CVE-2021-0559 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0559.

In Lag_max of p_ol_wgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172312730


Provide references for further information: Can you share references or external links related to CVE-2021-0559?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0559?


Explain the CVE ID: What does the identifier CVE-2021-0561 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0561.

In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174302683


Provide references for further information: Can you share references or external links related to CVE-2021-0561?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-06-01'}, {'name': 'FEDORA-2022-db30f1bd42', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWXBVMPPSL377I7YM55ZYXVKVMYOKES2/'}, {'name': '[debian-lts-announce] 20220316 [SECURITY] [DLA 2951-1] flac security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/03/msg00022.html'}, {'name': 'FEDORA-2022-ee96acc54f', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4Y7BW35TGNFYBYBSBDSGLUJHHTYEUSG/'}, {'name': '[debian-lts-announce] 20220903 [SECURITY] [DLA 3094-1] flac security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/09/msg00003.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0561?


Explain the CVE ID: What does the identifier CVE-2021-0562 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0562.

In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-176084648


Provide references for further information: Can you share references or external links related to CVE-2021-0562?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0562?


Explain the CVE ID: What does the identifier CVE-2021-0563 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0563.

In ih264e_fmt_conv_422i_to_420sp of ih264e_fmt_conv.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172908358


Provide references for further information: Can you share references or external links related to CVE-2021-0563?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0563?


Explain the CVE ID: What does the identifier CVE-2021-0564 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0564.

In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-176495665


Provide references for further information: Can you share references or external links related to CVE-2021-0564?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0564?


Explain the CVE ID: What does the identifier CVE-2021-0565 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0565.

In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174801970


Provide references for further information: Can you share references or external links related to CVE-2021-0565?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0565?


Explain the CVE ID: What does the identifier CVE-2021-0566 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0566.

In accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-175894436


Provide references for further information: Can you share references or external links related to CVE-2021-0566?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0566?


Explain the CVE ID: What does the identifier CVE-2021-0567 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0567.

In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179461812


Provide references for further information: Can you share references or external links related to CVE-2021-0567?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0567?


Explain the CVE ID: What does the identifier CVE-2021-0568 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0568.

In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170121238


Provide references for further information: Can you share references or external links related to CVE-2021-0568?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-06-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0568?


Explain the CVE ID: What does the identifier CVE-2021-0569 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0569.

In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174045870


Provide references for further information: Can you share references or external links related to CVE-2021-0569?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0569?


Explain the CVE ID: What does the identifier CVE-2021-0570 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0570.

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-178803845


Provide references for further information: Can you share references or external links related to CVE-2021-0570?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0570?


Explain the CVE ID: What does the identifier CVE-2021-0571 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0571.

In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and AppTaskImpl.java, there is possible access to restricted activities due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137395936


Provide references for further information: Can you share references or external links related to CVE-2021-0571?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0571?


Explain the CVE ID: What does the identifier CVE-2021-0572 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0572.

In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-177931355


Provide references for further information: Can you share references or external links related to CVE-2021-0572?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0572?


Explain the CVE ID: What does the identifier CVE-2021-0573 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0573.

In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187231635


Provide references for further information: Can you share references or external links related to CVE-2021-0573?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-08-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0573?


Explain the CVE ID: What does the identifier CVE-2021-0574 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0574.

In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187234876


Provide references for further information: Can you share references or external links related to CVE-2021-0574?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0574?


Explain the CVE ID: What does the identifier CVE-2021-0576 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0576.

In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187236084


Provide references for further information: Can you share references or external links related to CVE-2021-0576?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0576?


Explain the CVE ID: What does the identifier CVE-2021-0577 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0577.

In flv extractor, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187161771


Provide references for further information: Can you share references or external links related to CVE-2021-0577?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-07-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0577?


Explain the CVE ID: What does the identifier CVE-2021-0578 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0578.

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187161772


Provide references for further information: Can you share references or external links related to CVE-2021-0578?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0578?


Explain the CVE ID: What does the identifier CVE-2021-0579 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0579.

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187231636


Provide references for further information: Can you share references or external links related to CVE-2021-0579?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0579?


Explain the CVE ID: What does the identifier CVE-2021-0580 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0580.

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187231637


Provide references for further information: Can you share references or external links related to CVE-2021-0580?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0580?


Explain the CVE ID: What does the identifier CVE-2021-0581 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0581.

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187231638


Provide references for further information: Can you share references or external links related to CVE-2021-0581?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0581?


Explain the CVE ID: What does the identifier CVE-2021-0582 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0582.

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187149601


Provide references for further information: Can you share references or external links related to CVE-2021-0582?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0582?


Explain the CVE ID: What does the identifier CVE-2021-0583 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0583.

In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-182282956


Provide references for further information: Can you share references or external links related to CVE-2021-0583?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/aaos/2021-10-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0583?


Explain the CVE ID: What does the identifier CVE-2021-0584 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0584.

In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-179289794


Provide references for further information: Can you share references or external links related to CVE-2021-0584?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0584?


Explain the CVE ID: What does the identifier CVE-2021-0585 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0585.

In beginWrite and beginRead of MessageQueueBase.h, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-184963385


Provide references for further information: Can you share references or external links related to CVE-2021-0585?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0585?


Explain the CVE ID: What does the identifier CVE-2021-0586 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0586.

In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-182584940


Provide references for further information: Can you share references or external links related to CVE-2021-0586?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0586?


Explain the CVE ID: What does the identifier CVE-2021-0587 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0587.

In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185259758


Provide references for further information: Can you share references or external links related to CVE-2021-0587?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0587?


Explain the CVE ID: What does the identifier CVE-2021-0588 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0588.

In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-177238342


Provide references for further information: Can you share references or external links related to CVE-2021-0588?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0588?


Explain the CVE ID: What does the identifier CVE-2021-0589 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0589.

In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-180939982


Provide references for further information: Can you share references or external links related to CVE-2021-0589?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0589?


Explain the CVE ID: What does the identifier CVE-2021-0590 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0590.

In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-175213041


Provide references for further information: Can you share references or external links related to CVE-2021-0590?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0590?


Explain the CVE ID: What does the identifier CVE-2021-0591 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0591.

In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast receivers due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-179386960


Provide references for further information: Can you share references or external links related to CVE-2021-0591?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-08-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0591?


Explain the CVE ID: What does the identifier CVE-2021-0592 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0592.

In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-188061006


Provide references for further information: Can you share references or external links related to CVE-2021-0592?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-07-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0592?


Explain the CVE ID: What does the identifier CVE-2021-0593 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0593.

In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-179386068


Provide references for further information: Can you share references or external links related to CVE-2021-0593?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0593?


Explain the CVE ID: What does the identifier CVE-2021-0594 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0594.

In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176445224


Provide references for further information: Can you share references or external links related to CVE-2021-0594?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0594?


Explain the CVE ID: What does the identifier CVE-2021-0595 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0595.

In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-177457096


Provide references for further information: Can you share references or external links related to CVE-2021-0595?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0595?


Explain the CVE ID: What does the identifier CVE-2021-0596 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0596.

In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181346550


Provide references for further information: Can you share references or external links related to CVE-2021-0596?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0596?


Explain the CVE ID: What does the identifier CVE-2021-0597 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0597.

In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496502


Provide references for further information: Can you share references or external links related to CVE-2021-0597?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0597?


Explain the CVE ID: What does the identifier CVE-2021-0598 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0598.

In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-180422108


Provide references for further information: Can you share references or external links related to CVE-2021-0598?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0598?


Explain the CVE ID: What does the identifier CVE-2021-0599 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0599.

In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-175614289


Provide references for further information: Can you share references or external links related to CVE-2021-0599?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0599?


Explain the CVE ID: What does the identifier CVE-2021-0600 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0600.

In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-179042963


Provide references for further information: Can you share references or external links related to CVE-2021-0600?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0600?


Explain the CVE ID: What does the identifier CVE-2021-0601 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0601.

In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-180643802


Provide references for further information: Can you share references or external links related to CVE-2021-0601?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0601?


Explain the CVE ID: What does the identifier CVE-2021-0602 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0602.

In onCreateOptionsMenu of WifiNetworkDetailsFragment.java, there is a possible way for guest users to view and modify Wi-Fi settings for all configured APs due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-177573895


Provide references for further information: Can you share references or external links related to CVE-2021-0602?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0602?


Explain the CVE ID: What does the identifier CVE-2021-0603 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0603.

In onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts without permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-182809425


Provide references for further information: Can you share references or external links related to CVE-2021-0603?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0603?


Explain the CVE ID: What does the identifier CVE-2021-0604 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0604.

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-179910660


Provide references for further information: Can you share references or external links related to CVE-2021-0604?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0604?


Explain the CVE ID: What does the identifier CVE-2021-0605 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0605.

In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-110373476


Provide references for further information: Can you share references or external links related to CVE-2021-0605?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-06-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0605?


Explain the CVE ID: What does the identifier CVE-2021-0606 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0606.

In drm_syncobj_handle_to_fd of drm_syncobj.c, there is a possible use after free due to incorrect refcounting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168034487


Provide references for further information: Can you share references or external links related to CVE-2021-0606?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0606?


Explain the CVE ID: What does the identifier CVE-2021-0607 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0607.

In iaxxx_calc_i2s_div of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-180950209


Provide references for further information: Can you share references or external links related to CVE-2021-0607?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0607?


Explain the CVE ID: What does the identifier CVE-2021-0608 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0608.

In handleAppLaunch of AppLaunchActivity.java, there is a possible arbitrary activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174870704


Provide references for further information: Can you share references or external links related to CVE-2021-0608?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0608?


Explain the CVE ID: What does the identifier CVE-2021-0610 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0610.

In memory management driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05411456.


Provide references for further information: Can you share references or external links related to CVE-2021-0610?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/September-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0610?


Explain the CVE ID: What does the identifier CVE-2021-0611 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0611.

In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05425810.


Provide references for further information: Can you share references or external links related to CVE-2021-0611?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0611?


Explain the CVE ID: What does the identifier CVE-2021-0612 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0612.

In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05425834.


Provide references for further information: Can you share references or external links related to CVE-2021-0612?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0612?


Explain the CVE ID: What does the identifier CVE-2021-0613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0613.

In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05489178.


Provide references for further information: Can you share references or external links related to CVE-2021-0613?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/October-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0613?


Explain the CVE ID: What does the identifier CVE-2021-0614 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0614.

In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05495528; Issue ID: ALPS05495528.


Provide references for further information: Can you share references or external links related to CVE-2021-0614?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0614?


Explain the CVE ID: What does the identifier CVE-2021-0615 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0615.

In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561369; Issue ID: ALPS05561369.


Provide references for further information: Can you share references or external links related to CVE-2021-0615?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0615?


Explain the CVE ID: What does the identifier CVE-2021-0616 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0616.

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561389; Issue ID: ALPS05561389.


Provide references for further information: Can you share references or external links related to CVE-2021-0616?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0616?


Explain the CVE ID: What does the identifier CVE-2021-0617 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0617.

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561391; Issue ID: ALPS05561391.


Provide references for further information: Can you share references or external links related to CVE-2021-0617?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0617?


Explain the CVE ID: What does the identifier CVE-2021-0618 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0618.

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561394; Issue ID: ALPS05561394.


Provide references for further information: Can you share references or external links related to CVE-2021-0618?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0618?


Explain the CVE ID: What does the identifier CVE-2021-0619 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0619.

In ape extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561395; Issue ID: ALPS05561395.


Provide references for further information: Can you share references or external links related to CVE-2021-0619?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/November-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0619?


Explain the CVE ID: What does the identifier CVE-2021-0620 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0620.

In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561381.


Provide references for further information: Can you share references or external links related to CVE-2021-0620?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0620?


Explain the CVE ID: What does the identifier CVE-2021-0621 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0621.

In asf extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561383.


Provide references for further information: Can you share references or external links related to CVE-2021-0621?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0621?


Explain the CVE ID: What does the identifier CVE-2021-0622 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0622.

In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561388.


Provide references for further information: Can you share references or external links related to CVE-2021-0622?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0622?


Explain the CVE ID: What does the identifier CVE-2021-0623 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0623.

In asf extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05585817.


Provide references for further information: Can you share references or external links related to CVE-2021-0623?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0623?


Explain the CVE ID: What does the identifier CVE-2021-0624 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0624.

In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594988; Issue ID: ALPS05594988.


Provide references for further information: Can you share references or external links related to CVE-2021-0624?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0624?


Explain the CVE ID: What does the identifier CVE-2021-0625 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0625.

In ccu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594996; Issue ID: ALPS05594996.


Provide references for further information: Can you share references or external links related to CVE-2021-0625?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0625?


Explain the CVE ID: What does the identifier CVE-2021-0626 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0626.

In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05687510; Issue ID: ALPS05687510.


Provide references for further information: Can you share references or external links related to CVE-2021-0626?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/August-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0626?


Explain the CVE ID: What does the identifier CVE-2021-0627 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0627.

In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722434; Issue ID: ALPS05722434.


Provide references for further information: Can you share references or external links related to CVE-2021-0627?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0627?


Explain the CVE ID: What does the identifier CVE-2021-0628 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0628.

In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722454; Issue ID: ALPS05722454.


Provide references for further information: Can you share references or external links related to CVE-2021-0628?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0628?


Explain the CVE ID: What does the identifier CVE-2021-0629 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0629.

In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05776625; Issue ID: ALPS05776625.


Provide references for further information: Can you share references or external links related to CVE-2021-0629?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0629?


Explain the CVE ID: What does the identifier CVE-2021-0630 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0630.

In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05551397; Issue ID: ALPS05551397.


Provide references for further information: Can you share references or external links related to CVE-2021-0630?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/October-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0630?


Explain the CVE ID: What does the identifier CVE-2021-0631 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0631.

In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05551435; Issue ID: ALPS05551435.


Provide references for further information: Can you share references or external links related to CVE-2021-0631?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0631?


Explain the CVE ID: What does the identifier CVE-2021-0632 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0632.

In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker under certain build conditions with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05560246; Issue ID: ALPS05551383.


Provide references for further information: Can you share references or external links related to CVE-2021-0632?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0632?


Explain the CVE ID: What does the identifier CVE-2021-0633 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0633.

In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05585423; Issue ID: ALPS05585423.


Provide references for further information: Can you share references or external links related to CVE-2021-0633?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0633?


Explain the CVE ID: What does the identifier CVE-2021-0634 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0634.

In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594994; Issue ID: ALPS05594994.


Provide references for further information: Can you share references or external links related to CVE-2021-0634?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0634?


Explain the CVE ID: What does the identifier CVE-2021-0635 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0635.

When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:Android-10Android ID: A-189402477


Provide references for further information: Can you share references or external links related to CVE-2021-0635?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0635?


Explain the CVE ID: What does the identifier CVE-2021-0636 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0636.

When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion: Android-10Android ID: A-189392423


Provide references for further information: Can you share references or external links related to CVE-2021-0636?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0636?


Explain the CVE ID: What does the identifier CVE-2021-0639 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0639.

In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to the way sensitive data is handled. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-190724551


Provide references for further information: Can you share references or external links related to CVE-2021-0639?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-08-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0639?


Explain the CVE ID: What does the identifier CVE-2021-0640 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0640.

In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-187957589


Provide references for further information: Can you share references or external links related to CVE-2021-0640?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0640?


Explain the CVE ID: What does the identifier CVE-2021-0641 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0641.

In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185235454


Provide references for further information: Can you share references or external links related to CVE-2021-0641?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0641?


Explain the CVE ID: What does the identifier CVE-2021-0642 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0642.

In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-185126149


Provide references for further information: Can you share references or external links related to CVE-2021-0642?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0642?


Explain the CVE ID: What does the identifier CVE-2021-0643 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0643.

In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183612370


Provide references for further information: Can you share references or external links related to CVE-2021-0643?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2022-01-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0643?


Explain the CVE ID: What does the identifier CVE-2021-0644 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0644.

In conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-181053462


Provide references for further information: Can you share references or external links related to CVE-2021-0644?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0644?


Explain the CVE ID: What does the identifier CVE-2021-0645 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0645.

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an app to read private app directories in external storage, which should be restricted in Android 11, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157320644


Provide references for further information: Can you share references or external links related to CVE-2021-0645?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0645?


Explain the CVE ID: What does the identifier CVE-2021-0646 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0646.

In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if the user can also inject a printf into a privileged process's SQL with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-153352319


Provide references for further information: Can you share references or external links related to CVE-2021-0646?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0646?


Explain the CVE ID: What does the identifier CVE-2021-0649 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0649.

In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of privilege CONTROL_ALWAYS_ON_VPN with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-191382886


Provide references for further information: Can you share references or external links related to CVE-2021-0649?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-11-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0649?


Explain the CVE ID: What does the identifier CVE-2021-0650 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0650.

In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-190286685


Provide references for further information: Can you share references or external links related to CVE-2021-0650?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0650?


Explain the CVE ID: What does the identifier CVE-2021-0651 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0651.

In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to incorrect input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-67013844


Provide references for further information: Can you share references or external links related to CVE-2021-0651?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-10-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0651?


Explain the CVE ID: What does the identifier CVE-2021-0652 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0652.

In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185178568


Provide references for further information: Can you share references or external links related to CVE-2021-0652?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0652?


Explain the CVE ID: What does the identifier CVE-2021-0653 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0653.

In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-177931370


Provide references for further information: Can you share references or external links related to CVE-2021-0653?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0653?


Explain the CVE ID: What does the identifier CVE-2021-0654 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0654.

In isRealSnapshot of TaskThumbnailView.java, there is possible data exposure due to a missing permission check. This could lead to local information disclosure from locked profiles with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168802517References: N/A


Provide references for further information: Can you share references or external links related to CVE-2021-0654?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/pixel/2021-07-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0654?


Explain the CVE ID: What does the identifier CVE-2021-0655 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0655.

In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05673424; Issue ID: ALPS05673424.


Provide references for further information: Can you share references or external links related to CVE-2021-0655?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/November-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0655?


Explain the CVE ID: What does the identifier CVE-2021-0656 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0656.

In edma driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05709376; Issue ID: ALPS05709376.


Provide references for further information: Can you share references or external links related to CVE-2021-0656?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0656?


Explain the CVE ID: What does the identifier CVE-2021-0657 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0657.

In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672103; Issue ID: ALPS05672103.


Provide references for further information: Can you share references or external links related to CVE-2021-0657?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0657?


Explain the CVE ID: What does the identifier CVE-2021-0658 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0658.

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672107.


Provide references for further information: Can you share references or external links related to CVE-2021-0658?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0658?


Explain the CVE ID: What does the identifier CVE-2021-0659 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0659.

In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05687559; Issue ID: ALPS05687559.


Provide references for further information: Can you share references or external links related to CVE-2021-0659?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0659?


Explain the CVE ID: What does the identifier CVE-2021-0660 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0660.

In ccu, there is a possible out of bounds read due to incorrect error handling. This could lead to information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827145; Issue ID: ALPS05827145.


Provide references for further information: Can you share references or external links related to CVE-2021-0660?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/September-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0660?


Explain the CVE ID: What does the identifier CVE-2021-0661 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0661.

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844413; Issue ID: ALPS05844413.


Provide references for further information: Can you share references or external links related to CVE-2021-0661?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/October-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0661?


Explain the CVE ID: What does the identifier CVE-2021-0662 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0662.

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844434; Issue ID: ALPS05844434.


Provide references for further information: Can you share references or external links related to CVE-2021-0662?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0662?


Explain the CVE ID: What does the identifier CVE-2021-0663 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0663.

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844458; Issue ID: ALPS05844458.


Provide references for further information: Can you share references or external links related to CVE-2021-0663?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0663?


Explain the CVE ID: What does the identifier CVE-2021-0664 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0664.

In ccu, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827158; Issue ID: ALPS05827158.


Provide references for further information: Can you share references or external links related to CVE-2021-0664?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0664?


Explain the CVE ID: What does the identifier CVE-2021-0665 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0665.

In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672113; Issue ID: ALPS05672113.


Provide references for further information: Can you share references or external links related to CVE-2021-0665?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0665?


Explain the CVE ID: What does the identifier CVE-2021-0666 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0666.

In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672086; Issue ID: ALPS05672086.


Provide references for further information: Can you share references or external links related to CVE-2021-0666?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0666?


Explain the CVE ID: What does the identifier CVE-2021-0667 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0667.

In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05670581; Issue ID: ALPS05670581.


Provide references for further information: Can you share references or external links related to CVE-2021-0667?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0667?


Explain the CVE ID: What does the identifier CVE-2021-0668 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0668.

In apusys, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05670521; Issue ID: ALPS05670521.


Provide references for further information: Can you share references or external links related to CVE-2021-0668?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0668?


Explain the CVE ID: What does the identifier CVE-2021-0669 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0669.

In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05681550; Issue ID: ALPS05681550.


Provide references for further information: Can you share references or external links related to CVE-2021-0669?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/November-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0669?


Explain the CVE ID: What does the identifier CVE-2021-0670 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0670.

In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05654663; Issue ID: ALPS05654663.


Provide references for further information: Can you share references or external links related to CVE-2021-0670?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0670?


Explain the CVE ID: What does the identifier CVE-2021-0671 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0671.

In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05664273; Issue ID: ALPS05664273.


Provide references for further information: Can you share references or external links related to CVE-2021-0671?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0671?


Explain the CVE ID: What does the identifier CVE-2021-0672 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0672.

In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-199678035


Provide references for further information: Can you share references or external links related to CVE-2021-0672?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-11-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0672?


Explain the CVE ID: What does the identifier CVE-2021-0673 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0673.

In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05977326; Issue ID: ALPS05977326.


Provide references for further information: Can you share references or external links related to CVE-2021-0673?

{'tags': ['x_refsource_MISC'], 'url': 'https://corp.mediatek.com/product-security-bulletin/December-2021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0673?


Explain the CVE ID: What does the identifier CVE-2021-0674 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0674.

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237.


Provide references for further information: Can you share references or external links related to CVE-2021-0674?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0674?


Explain the CVE ID: What does the identifier CVE-2021-0675 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0675.

In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064258.


Provide references for further information: Can you share references or external links related to CVE-2021-0675?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0675?


Explain the CVE ID: What does the identifier CVE-2021-0676 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0676.

In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05863009; Issue ID: ALPS05863009.


Provide references for further information: Can you share references or external links related to CVE-2021-0676?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0676?


Explain the CVE ID: What does the identifier CVE-2021-0677 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0677.

In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827154; Issue ID: ALPS05827154.


Provide references for further information: Can you share references or external links related to CVE-2021-0677?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0677?


Explain the CVE ID: What does the identifier CVE-2021-0678 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0678.

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05722511.


Provide references for further information: Can you share references or external links related to CVE-2021-0678?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0678?


Explain the CVE ID: What does the identifier CVE-2021-0679 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0679.

In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05687781.


Provide references for further information: Can you share references or external links related to CVE-2021-0679?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0679?


Explain the CVE ID: What does the identifier CVE-2021-0680 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0680.

In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-192535676


Provide references for further information: Can you share references or external links related to CVE-2021-0680?

{'tags': ['x_refsource_MISC'], 'url': 'https://source.android.com/security/bulletin/2021-09-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0680?


Explain the CVE ID: What does the identifier CVE-2021-0681 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0681.

In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-192535337


Provide references for further information: Can you share references or external links related to CVE-2021-0681?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0681?


Explain the CVE ID: What does the identifier CVE-2021-0682 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0682.

In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-159624555


Provide references for further information: Can you share references or external links related to CVE-2021-0682?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0682?


Explain the CVE ID: What does the identifier CVE-2021-0683 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0683.

In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-185398942


Provide references for further information: Can you share references or external links related to CVE-2021-0683?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0683?


Explain the CVE ID: What does the identifier CVE-2021-0684 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0684.

In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-179839665


Provide references for further information: Can you share references or external links related to CVE-2021-0684?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0684?


Explain the CVE ID: What does the identifier CVE-2021-0685 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0685.

In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-191055353


Provide references for further information: Can you share references or external links related to CVE-2021-0685?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0685?


Explain the CVE ID: What does the identifier CVE-2021-0686 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0686.

In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-177927831


Provide references for further information: Can you share references or external links related to CVE-2021-0686?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0686?


Explain the CVE ID: What does the identifier CVE-2021-0687 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0687.

In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-188913943


Provide references for further information: Can you share references or external links related to CVE-2021-0687?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0687?


Explain the CVE ID: What does the identifier CVE-2021-0688 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0688.

In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-161149543


Provide references for further information: Can you share references or external links related to CVE-2021-0688?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0688?


Explain the CVE ID: What does the identifier CVE-2021-0689 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0689.

In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-190188264


Provide references for further information: Can you share references or external links related to CVE-2021-0689?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0689?


Explain the CVE ID: What does the identifier CVE-2021-0690 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0690.

In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-182152757


Provide references for further information: Can you share references or external links related to CVE-2021-0690?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0690?