CVE-2021-0434

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-167403112

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Dec 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-04357.5In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote inforCVE-2021-04365.5In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local inforCVE-2021-04377.8In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged processCVE-2021-04387.8In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an iCVE-2021-04397.8In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write due to a missing bounCVE-2021-04417.3In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of prCVE-2021-04427.8In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free. This cCVE-2021-04434.7In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. TCVE-2021-04445.5In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosuCVE-2021-04457.8In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to local escalation of privCVE-2021-04467.3In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalatiCVE-2021-04494.4In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information
CVE-2021-0434: High severity, CVSS 7.3 | Vulnix