CVE-2021-0672

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-199678035

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Nov 18, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-06737.8In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilCVE-2021-06745.5In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure wiCVE-2021-06757.8In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege CVE-2021-06764.4In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosurCVE-2021-06774.4In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with SysteCVE-2021-06786.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystCVE-2021-06796.7In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with SystemCVE-2021-06805.5In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disCVE-2021-06815.5In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disCVE-2021-06825.5In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permissioCVE-2021-06837.8In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could leCVE-2021-06847.8In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local
CVE-2021-0672: Medium severity, CVSS 5.5 | Vulnix