CVEvulnerability
CVE-2021-0919
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-12-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-190
Description
In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service making the lockscreen unusable with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-197336441
Affected configurations
• google android 9.0
• google android 10.0
• google android 11.0
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://source.android.com/security/bulletin/2021-11-01 Vendor Advisory
- https://source.android.com/security/bulletin/2021-11-01 Vendor Advisory