CVE-2021-0468
Last modified
CVE-2021-0468 is a medium-severity vulnerability rated 6.6/10 on the CVSS scale. In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. EPSS estimates a 0.13% chance of exploitation in the next 30 days.
Description
In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-180427272
Metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | All versions |
References
- https://source.android.com/security/bulletin/2021-04-01Vendor Advisory
- https://source.android.com/security/bulletin/2021-04-01Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-0468?
How severe is CVE-2021-0468?
How do I fix CVE-2021-0468?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-0462In the NXP NFC firmware, there is a possible insecure firmwa…6.7
- CVE-2021-0463In convertToHidl of convert.cpp, there is a possible out of …5.5
- CVE-2021-0464In sound_trigger_event_alloc of platform.h, there is a possi…7.8
- CVE-2021-0465In GenerateFaceMask of face.cc, there is a possible out of b…7.8
- CVE-2021-0466In startIpClient of ClientModeImpl.java, there is a possible…7.5
- CVE-2021-0467In Chromecast bootROM, there is a possible out of bounds wri…6.8
- CVE-2021-0471In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out …5.5
- CVE-2021-0472In shouldLockKeyguard of LockTaskController.java, there is a…7.8
- CVE-2021-0473In rw_t3t_process_error of rw_t3t.cc, there is a possible do…8.8
- CVE-2021-0474In avrc_msg_cback of avrc_api.cc, there is a possible out of…9.8
- CVE-2021-0475In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possibl…8.8
- CVE-2021-0476In FindOrCreatePeer of btif_av.cc, there is a possible use a…7
Are you affected by CVE-2021-0468?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
