CVE-2021-0331

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local escalation of privilege and notification access with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-170731783

• CWE-1021

• https://source.android.com/security/bulletin/2021-02-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/2021-02-01Patch, Vendor Advisory

Published

Feb 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0325In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a …8.8
• CVE-2021-0326In p2p_copy_client_info of p2p.c, there is a possible out of…7.5
• CVE-2021-0327In getContentProviderImpl of ActivityManagerService.java, th…7.8
• CVE-2021-0328In onBatchScanReports and deliverBatchScan of GattService.ja…7.8
• CVE-2021-0329In several native functions called by AdvertiseManager.java,…7.8
• CVE-2021-0330In add_user_ce and remove_user_ce of storaged.cpp, there is …7.8
• CVE-2021-0332In bootFinished of SurfaceFlinger.cpp, there is a possible m…7.8
• CVE-2021-0333In onCreate of BluetoothPermissionActivity.java, there is a …7.3
• CVE-2021-0334In onTargetSelected of ResolverActivity.java, there is a pos…7.8
• CVE-2021-0335In process of C2SoftHevcDec.cpp, there is a possible out of …6.5
• CVE-2021-0336In onReceive of BluetoothPermissionRequest.java, there is a …7.8
• CVE-2021-0337In moveInMediaStore of FileSystemProvider.java, there is a p…7.8