CVE-2021-0654

In isRealSnapshot of TaskThumbnailView.java, there is possible data exposure due to a missing permission check. This could lead to local information disclosure from locked profiles with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168802517References: N/A

• CWE-862

• https://source.android.com/security/bulletin/pixel/2021-07-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2021-07-01Vendor Advisory

Published

Jul 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0646In sqlite3_str_vappendf of sqlite3.c, there is a possible ou…7.8
• CVE-2021-0649In stopVpnProfile of Vpn.java, there is a possible VPN profi…7.8
• CVE-2021-0650In WT_InterpolateNoLoop of eas_wtengine.c, there is a possib…6.5
• CVE-2021-0651In loadLabel of PackageItemInfo.java, there is a possible wa…5.5
• CVE-2021-0652In VectorDrawable::VectorDrawable of VectorDrawable.java, th…7.8
• CVE-2021-0653In enqueueNotification of NetworkPolicyManagerService.java, …5.5
• CVE-2021-0655In mdlactl driver, there is a possible memory corruption due…6.7
• CVE-2021-0656In edma driver, there is a possible memory corruption due to…6.7
• CVE-2021-0657In apusys, there is a possible out of bounds write due to a …6.7
• CVE-2021-0658In apusys, there is a possible out of bounds write due to a …6.7
• CVE-2021-0659In apusys, there is a possible out of bounds read due to an …4.4
• CVE-2021-0660In ccu, there is a possible out of bounds read due to incorr…4.9