PT-2021-13181 · Google · Android

Published 2021-06-22 · Updated 2021-06-23 · CVE-2021-0534

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Android versions Android-11

Description: The issue is related to a possible lack of broadcast protection in the permission declarations of DeviceAdminReceiver.java, which could lead to local escalation of privilege. No additional execution privileges are needed for exploitation, and user interaction is not required.

Recommendations: For Android version Android-11, consider restricting access to the DeviceAdminReceiver.java until a patch is available. As a temporary workaround, review and secure the permission declarations to prevent potential exploitation.

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2021-0534

Affected Products

Android

References · 3

• https://osv.dev/vulnerability/CVE-2021-0534 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0534 · Security Note
• https://source.android.com/security/bulletin/pixel/2021-06-01 · Vendor Advisory