CVE-2021-0904

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06076938; Issue ID: ALPS06076938.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published: Dec 15, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-09188.8In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote CVE-2021-09195.0In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of CVE-2021-09206.4In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of priv CVE-2021-09217.8In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due to improper input va CVE-2021-09227.8In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PROFILES permission due CVE-2021-09237.8In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lea CVE-2021-09247.8In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation CVE-2021-09257.5In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote in CVE-2021-09267.8In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a missing permission chec CVE-2021-09277.8In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in the code. This could CVE-2021-09287.8In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input val CVE-2021-09297.8In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could