CVE-2021-0547

In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL handler due to a missing permission check. This could lead to local escalation of privilege that may result in undefined behavior in some HAL implementations with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174151048

• CWE-862

• https://source.android.com/security/bulletin/pixel/2021-06-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2021-06-01Vendor Advisory

Published

Jun 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0541In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.c…4.4
• CVE-2021-0542In updateNotification of BeamTransferManager.java, there is …5.5
• CVE-2021-0543In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there …6.7
• CVE-2021-0544In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is …6.7
• CVE-2021-0545In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is …6.7
• CVE-2021-0546In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is …6.7
• CVE-2021-0548In rw_i93_send_to_lower of rw_i93.cc, there is a possible ou…7.8
• CVE-2021-0549In sspRequestCallback of BondStateMachine.java, there is a p…4.4
• CVE-2021-0550In onLoadFailed of AnnotateActivity.java, there is a possibl…7.8
• CVE-2021-0551In bind of MediaControlPanel.java, there is a possible way t…6.5
• CVE-2021-0552In getEndItemSliceAction of MediaOutputSlice.java, there is …5.5
• CVE-2021-0553In onBindViewHolder of AppSwitchPreference.java, there is a …7.3