CVE-2021-0494

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In memory management driver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183461318

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-04957.8In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of priviCVE-2021-04967.8In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilegeCVE-2021-04977.8In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilegeCVE-2021-04987.8In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege wiCVE-2021-05046.5In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote CVE-2021-05057.8In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could lead to local escalatCVE-2021-05067.3In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lCVE-2021-05078.8In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote codCVE-2021-05087.0In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of prCVE-2021-05097.0In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation ofCVE-2021-05107.8In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation CVE-2021-05117.8In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local