CVE-2021-0694

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissions due to insufficient background restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-183147114

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Apr 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-06955.5In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to local information discl CVE-2021-06967.0In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privile CVE-2021-06977.0In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalat CVE-2021-06985.5In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local infor CVE-2021-06997.8In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege CVE-2021-07019.8In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could all CVE-2021-07025.5In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This cou CVE-2021-07036.8In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of CVE-2021-07045.5In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accoun CVE-2021-07057.8In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permission CVE-2021-07065.5In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. CVE-2021-07077.8In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privi