CVEvulnerability
CVE-2021-0338
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-02-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-770
Description
In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156260178
Affected configurations
• google android 10.0
• google android 11.0
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://source.android.com/security/bulletin/2021-02-01 Patch, Vendor Advisory
- https://source.android.com/security/bulletin/2021-02-01 Patch, Vendor Advisory