CVE-2021-1038

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-183411279

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1021

Affected software

No affected versions have been published.

Timeline

Published
Dec 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-10397.8In NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local eCVE-2021-10407.8In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local CVE-2021-10415.5In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no CVE-2021-10424.4In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use after free. This coCVE-2021-10435.5In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to local information diCVE-2021-10447.8In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a missing bounds checkCVE-2021-10457.5Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/ACVE-2021-10464.4In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to lCVE-2021-10474.4In valid_ipc_dram_addr of cm_access_control.c, there is a possible out of bounds read due to an integer overflow. This could lead to local iCVE-2021-10487.8In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalationCVE-2021-10499.8Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722CVE-2021-10507.8In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to lo