CVE-2021-0928: Input Validation
In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-188675581
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-0928?
The severity of CVE-2021-0928 is considered critical due to potential local escalation of privilege.
How do I fix CVE-2021-0928?
To fix CVE-2021-0928, ensure that you update your Android device to the latest security patch provided by Google.
Which versions of Android are affected by CVE-2021-0928?
CVE-2021-0928 affects Android versions 9.0, 10.0, and 11.0.
Is user interaction required to exploit CVE-2021-0928?
No, user interaction is not needed for the exploitation of CVE-2021-0928.
What is the potential impact of CVE-2021-0928?
The potential impact of CVE-2021-0928 is local escalation of privilege, which could allow an attacker to gain unauthorized access to system resources.