CVE-2021-1034

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

In getLine1NumberForDisplay of PhoneInterfaceManager.java, there is apossible way to determine whether an app is installed, without querypermissions due to a missing permission check. This could lead to localinformation disclosure with no additional execution privileges needed. Userinteraction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193441322

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Dec 15, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-10357.8In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary broadcast receiver due CVE-2021-10367.8In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local esc CVE-2021-10375.3The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to lis CVE-2021-10385.5In UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could lead to local denial o CVE-2021-10397.8In NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local e CVE-2021-10407.8In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local CVE-2021-10415.5In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no CVE-2021-10424.4In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use after free. This co CVE-2021-10435.5In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to local information di CVE-2021-10447.8In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a missing bounds check CVE-2021-10457.5Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A CVE-2021-10464.4In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to l