CVE-2021-0641: Medium severity Google Android vulnerability
In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185235454
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-0641?
CVE-2021-0641 has been classified as a moderate severity vulnerability due to local information disclosure risks.
How do I fix CVE-2021-0641?
To mitigate CVE-2021-0641, ensure that your Android device is updated to the latest security patch provided by Google.
What types of devices are affected by CVE-2021-0641?
CVE-2021-0641 affects multiple versions of Android, specifically 8.1, 9.0, 10.0, and 11.0.
What are the potential impacts of CVE-2021-0641?
Exploitation of CVE-2021-0641 can lead to the unauthorized disclosure of unique identifiers from the device.
Is user interaction required to exploit CVE-2021-0641?
No, CVE-2021-0641 can be exploited without any user interaction.