CVE-2021-0651: Input Validation

Published Oct 4, 2021

Updated

In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to incorrect input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-67013844

Affected Software

4 affected components

Google Android=9.0

Google Android=10.0

Google Android=11.0

Google Android

Event History

Oct 4, 2021

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Oct 22, 2021

CVE Published

via MITRE·01:26 PM

Data Sourced

via MITRE·01:26 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-0651?

CVE-2021-0651 has a moderate severity rating due to the potential for denial of service on affected devices.

How do I fix CVE-2021-0651?

To mitigate CVE-2021-0651, ensure that your Android device is updated to the latest version provided by Google.

Which Android versions are affected by CVE-2021-0651?

CVE-2021-0651 affects Android versions 9.0, 10.0, and 11.0.

What type of attack does CVE-2021-0651 facilitate?

CVE-2021-0651 allows for a local denial of service attack due to improper input validation.

Is user interaction required for CVE-2021-0651 exploitation?

Yes, user interaction is necessary for the successful exploitation of CVE-2021-0651.