CVE-2021-0649

In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of privilege CONTROL_ALWAYS_ON_VPN with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-191382886

• CWE-863

• https://source.android.com/security/bulletin/2021-11-01Vendor Advisory
• https://source.android.com/security/bulletin/2021-11-01Vendor Advisory

Published

Dec 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0641In getAvailableSubscriptionInfoList of SubscriptionControlle…5.5
• CVE-2021-0642In onResume of VoicemailSettingsFragment.java, there is a po…5.5
• CVE-2021-0643In getAllSubInfoList of SubscriptionController.java, there i…5.5
• CVE-2021-0644In conditionallyRemoveIdentifiers of SubscriptionController.…5.5
• CVE-2021-0645In shouldBlockFromTree of ExternalStorageProvider.java, ther…7.8
• CVE-2021-0646In sqlite3_str_vappendf of sqlite3.c, there is a possible ou…7.8
• CVE-2021-0650In WT_InterpolateNoLoop of eas_wtengine.c, there is a possib…6.5
• CVE-2021-0651In loadLabel of PackageItemInfo.java, there is a possible wa…5.5
• CVE-2021-0652In VectorDrawable::VectorDrawable of VectorDrawable.java, th…7.8
• CVE-2021-0653In enqueueNotification of NetworkPolicyManagerService.java, …5.5
• CVE-2021-0654In isRealSnapshot of TaskThumbnailView.java, there is possib…5.5
• CVE-2021-0655In mdlactl driver, there is a possible memory corruption due…6.7