CVE-2021-0478

In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-169255797

• CWE-755

• https://source.android.com/security/bulletin/2021-06-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/2021-06-01Patch, Vendor Advisory

Published

Jun 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0472In shouldLockKeyguard of LockTaskController.java, there is a…7.8
• CVE-2021-0473In rw_t3t_process_error of rw_t3t.cc, there is a possible do…8.8
• CVE-2021-0474In avrc_msg_cback of avrc_api.cc, there is a possible out of…9.8
• CVE-2021-0475In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possibl…8.8
• CVE-2021-0476In FindOrCreatePeer of btif_av.cc, there is a possible use a…7
• CVE-2021-0477In notifyScreenshotError of ScreenshotNotificationsControlle…7.8
• CVE-2021-0480In createPendingIntent of SnoozeHelper.java, there is a poss…5.5
• CVE-2021-0481In onActivityResult of EditUserPhotoController.java, there i…7.8
• CVE-2021-0482In BinderDiedCallback of MediaCodec.cpp, there is a possible…7
• CVE-2021-0483In multiple methods of AAudioService, there is a possible us…7.8
• CVE-2021-0484In readVector of IMediaPlayer.cpp, there is a possible read …5.5
• CVE-2021-0485In getMinimalSize of PipBoundsAlgorithm.java, there is a pos…7.8