CVE-2021-0481

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-172939189

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-04827.0In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation CVE-2021-04837.8In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of priCVE-2021-04845.5In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to locCVE-2021-04857.8In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to a permissions bypassCVE-2021-04867.8In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permissions bypass. This cCVE-2021-04877.8In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user consent due to a tapjaCVE-2021-04886.7In pb_write of pb_encode.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of prCVE-2021-04897.8In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pCVE-2021-04907.8In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pCVE-2021-04917.8In memory management driver, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalatCVE-2021-04927.8In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pCVE-2021-04937.8In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p
CVE-2021-0481: High severity, CVSS 7.8 | Vulnix