CVE-2021-0375

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-167261484

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-330

Affected software

No affected versions have been published.

Timeline

Published
Mar 10, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-03767.8In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypCVE-2021-03775.5In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input validation. This could leadCVE-2021-03786.5In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informatioCVE-2021-03796.5In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote inforCVE-2021-03807.8In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing pCVE-2021-03815.5In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This couldCVE-2021-03825.5In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could CVE-2021-03837.8In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege in carrier settingsCVE-2021-03857.8In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFiCVE-2021-03867.8In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalatiCVE-2021-03876.4In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalationCVE-2021-03887.8In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could
CVE-2021-0375: Medium severity, CVSS 5.5 | Vulnix