CVE-2021-0375
Last modified
CVE-2021-0375 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. EPSS estimates a 0.12% chance of exploitation in the next 30 days.
Description
In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-167261484
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 11.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-0375?
How severe is CVE-2021-0375?
How do I fix CVE-2021-0375?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-0368In oggpack_look of bitwise.c, there is a possible out of bou…6.5
- CVE-2021-0369In CrossProfileAppsServiceImpl.java, there is the possibilit…7.8
- CVE-2021-0370In Write of NxpMfcReader.cc, there is a possible out of boun…6.7
- CVE-2021-0371In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a pos…6.7
- CVE-2021-0372In getMediaOutputSliceAction of RemoteMediaSlice.java, there…7.8
- CVE-2021-0374In BnAudioPolicyService::onTransact of IAudioPolicyService.c…4.4
- CVE-2021-0376In checkUriPermission and related functions of MediaProvider…7.8
- CVE-2021-0377In DeltaPerformer::Write of delta_performer.cc, there is a p…5.5
- CVE-2021-0378In getNbits of pvmp3_getbits.cpp, there is a possible out of…6.5
- CVE-2021-0379In getUpTo17bits of pvmp3_getbits.cpp, there is a possible o…6.5
- CVE-2021-0380In onReceive of DcTracker.java, there is a possible way to t…7.8
- CVE-2021-0381In updateNotifications of DeviceStorageMonitorService.java, …5.5
Are you affected by CVE-2021-0375?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
