CVE-2021-0693

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In openFile of HeapDumpProvider.java, there is a possible way to retrieve generated heap dumps from debuggable apps due to an unprotected provider. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-184046948

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Oct 6, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-06947.8In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissCVE-2021-06955.5In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclCVE-2021-06967.0In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privileCVE-2021-06977.0In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalatCVE-2021-06985.5In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local inforCVE-2021-06997.8In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege CVE-2021-07019.8In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allCVE-2021-07025.5In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This couCVE-2021-07036.8In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation ofCVE-2021-07045.5In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounCVE-2021-07057.8In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissionCVE-2021-07065.5In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check.
CVE-2021-0693: Medium severity, CVSS 5.5 | Vulnix