CVE-2021-0515

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-167389063

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jul 14, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-05169.8In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remotCVE-2021-05177.5In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the codCVE-2021-05185.5In Wi-Fi, there is a possible leak of location-sensitive data due to a missing permission check. This could lead to local information discloCVE-2021-05197.8In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local inCVE-2021-05207.0In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead CVE-2021-05215.5In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead toCVE-2021-05227.5In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remCVE-2021-05237.3In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to a tapjacking/overlay CVE-2021-05245.5In isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure of installed packages due to side channel CVE-2021-05257.8In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privileCVE-2021-05267.8In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of priviCVE-2021-05277.8In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege
CVE-2021-0515: Critical severity, CVSS 9.8 | Vulnix