CVE-2021-0705

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of Background Service Restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-185388103

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Oct 22, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-07065.5In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. CVE-2021-07077.8In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of priviCVE-2021-07087.8In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead tCVE-2021-07345.5In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disCVE-2021-07355.5In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to CVE-2021-07697.3In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to unclear UI. This could leCVE-2021-07997.8In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilCVE-2021-08699.8In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to rCVE-2021-08708.1In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code executiCVE-2021-08717.8In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that couldCVE-2021-08727.8In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow ouCVE-2021-08737.8In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-
CVE-2021-0705: High severity, CVSS 7.8 | Vulnix