CVE-2021-0313: Input Validation

Published Jan 4, 2021

Updated

In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170968514.

Affected Software

6 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android=11.0

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2021-01-01

Event History

Jan 4, 2021

CVE Published

via Android·12:00 AM

Jan 11, 2021

CVE Published

via MITRE·09:48 PM

Data Sourced

via MITRE·09:48 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-0313?

CVE-2021-0313 has been classified as a high severity vulnerability due to its potential to cause remote denial of service.

How do I fix CVE-2021-0313?

To fix CVE-2021-0313, update your Android device to the latest available version that patches the vulnerability.

Is user interaction required to exploit CVE-2021-0313?

No, user interaction is not needed for the exploitation of CVE-2021-0313.

What versions of Android are affected by CVE-2021-0313?

CVE-2021-0313 affects Android versions 8.0, 8.1, 9.0, 10.0, and 11.0.

What can happen if CVE-2021-0313 is exploited?

If CVE-2021-0313 is exploited, it could lead to a crash or slowdown of the affected TextView component, resulting in a denial of service.