CVE-2021-0434: High severity Google Android vulnerability
In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-167403112
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-0434?
CVE-2021-0434 is classified as a high-severity vulnerability due to its potential for local escalation of privilege.
How do I fix CVE-2021-0434?
To remediate CVE-2021-0434, update your Android device to the latest version that removes the susceptible Bluetooth permission request.
What versions of Android are affected by CVE-2021-0434?
CVE-2021-0434 affects Android versions 9.0, 10.0, and 11.0.
What types of attacks can be launched using CVE-2021-0434?
CVE-2021-0434 can allow a malicious Bluetooth device to perform phishing attacks by acquiring user permissions without adequate information.
What should I do if I suspect exploitation of CVE-2021-0434 on my device?
If you suspect exploitation of CVE-2021-0434, immediately update your Android device and monitor for any unauthorized access.