CVE-2021-0534: High severity Google Android vulnerability
Published Jun 1, 2021
·Updated
In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
2 affected componentsFixes available
Google Android=11.0
android/platform/frameworks/base>=11:0<11:2021-06-01
11:2021-06-01
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/frameworks/baseto a version that resolves this vulnerability.Fixed in 11:2021-06-01
Event History
Jun 1, 2021
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Jun 22, 2021
CVE Published
via MITRE·10:56 AM
Data Sourced
via MITRE·10:56 AM
DescriptionWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires local access and low privileges. No user interaction or additional execution privileges are needed.
2
What impact could successful exploitation have?
A local attacker could escalate privileges. The listed impact includes high confidentiality, integrity, and availability effects.
3
Which Android release is identified as affected?
The affected product data identifies Android 11.