CVE-2021-0511

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-178055795

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jun 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-05127.8In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This coulCVE-2021-05137.8In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improperCVE-2021-05148.1In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code executionCVE-2021-05159.8In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could leadCVE-2021-05169.8In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remotCVE-2021-05177.5In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the codCVE-2021-05185.5In Wi-Fi, there is a possible leak of location-sensitive data due to a missing permission check. This could lead to local information discloCVE-2021-05197.8In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local inCVE-2021-05207.0In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead CVE-2021-05215.5In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead toCVE-2021-05227.5In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remCVE-2021-05237.3In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to a tapjacking/overlay
CVE-2021-0511: High severity, CVSS 7.8 | Vulnix