CVE-2021-0478

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-169255797

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-755

Affected software

No affected versions have been published.

Timeline

Published
Jun 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-04805.5In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. This could lead to locaCVE-2021-04817.8In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. ThisCVE-2021-04827.0In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation CVE-2021-04837.8In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of priCVE-2021-04845.5In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to locCVE-2021-04857.8In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to a permissions bypassCVE-2021-04867.8In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permissions bypass. This cCVE-2021-04877.8In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user consent due to a tapjaCVE-2021-04886.7In pb_write of pb_encode.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of prCVE-2021-04897.8In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pCVE-2021-04907.8In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pCVE-2021-04917.8In memory management driver, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalat
CVE-2021-0478: High severity, CVSS 7.8 | Vulnix