CVE-2021-0338

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156260178

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published: Feb 10, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-03397.8In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the fo CVE-2021-03408.8In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This cou CVE-2021-03417.5In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used cr CVE-2021-03426.7In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with CVE-2021-03436.7In kisd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2021-03446.7In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with Syst CVE-2021-03456.7In mobile_log_d, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privil CVE-2021-03466.7In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Syst CVE-2021-03474.4In ccu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System ex CVE-2021-03486.7In vpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2021-03496.7In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with Syst CVE-2021-03504.4In ged, there is a possible system crash due to an improper input validation. This could lead to local denial of service with System executi