CVE-2021-0360

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442006.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Feb 3, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-03616.7In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with SystCVE-2021-03626.7In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System eCVE-2021-03636.7In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalation of privilege with CVE-2021-03646.7In mobile_log_d, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege wiCVE-2021-03656.7In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with SystCVE-2021-03666.4In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System executioCVE-2021-03676.4In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System executioCVE-2021-03686.5In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information diCVE-2021-03697.8In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state not displaying properCVE-2021-03706.7In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pCVE-2021-03716.7In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to localCVE-2021-03727.8In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead
CVE-2021-0360: Medium severity, CVSS 6.7 | Vulnix