CVE-2021-0433: High severity Google Android vulnerability
In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/frameworks/baseto a version that resolves this vulnerability.Fixed in 8.1:2021-04-01 - Upgrade
Upgrade
android/platform/frameworks/baseto a version that resolves this vulnerability.Fixed in 9:2021-04-01 - Upgrade
Upgrade
android/platform/frameworks/baseto a version that resolves this vulnerability.Fixed in 10:2021-04-01 - Upgrade
Upgrade
android/platform/frameworks/baseto a version that resolves this vulnerability.Fixed in 11:2021-04-01
Event History
Frequently Asked Questions
Which Android releases are affected?
The affected releases listed are Android 8.1, Android 9, Android 10, and Android 11.
What must an attacker do to exploit this issue?
The attacker needs to use a tapjacking or overlay attack against the device-pairing consent flow. User interaction is required, but no additional execution privileges are needed.
What is the impact if exploitation succeeds?
An attacker can bypass user consent for Bluetooth pairing and pair malicious Bluetooth devices. This can result in local escalation of privilege.
Is a fix available?
Yes. A patch is available; the issue is tracked as Android ID A-171221090 and is covered by the April 2021 Android security bulletin.