CVE-2021-0889

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-8.1 Android-9Android ID: A-180745296

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
n/aAndroidAndroid-10 Android-11 Android-12 Android-8.1 Android-9

References

Timeline

Published
Dec 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-08917.5An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Product: AndroidVersionCVE-2021-08936.7In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execuCVE-2021-08946.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystCVE-2021-08956.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystCVE-2021-08966.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystCVE-2021-08976.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystCVE-2021-08986.7In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execuCVE-2021-08996.7In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execuCVE-2021-09004.4In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SysCVE-2021-09016.7In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with SystemCVE-2021-09024.4In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SysCVE-2021-09036.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Syst
CVE-2021-0889: Critical severity, CVSS 9.8 | Vulnix