2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-39647 | MEDIUM | 4.4 | 0.1% | Dec 15, 2021 | In mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a possible reinitialization of... |
| CVE-2021-39643 | MEDIUM | 6.7 | 0.1% | Dec 15, 2021 | In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missi... |
| CVE-2021-39642 | MEDIUM | 6.4 | 0.1% | Dec 15, 2021 | In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This... |
| CVE-2021-39639 | MEDIUM | 6.8 | 0.1% | Dec 15, 2021 | In TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check. This could lead to lo... |
| CVE-2021-39638 | MEDIUM | 6.7 | 0.1% | Dec 15, 2021 | In periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a use after free. This co... |
| CVE-2021-39637 | MEDIUM | 4.4 | 0.1% | Dec 15, 2021 | In CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds read due to a missing b... |
| CVE-2021-39636 | MEDIUM | 4.4 | 0.2% | Dec 15, 2021 | In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitial... |
| CVE-2021-1047 | MEDIUM | 4.4 | 0.1% | Dec 15, 2021 | In valid_ipc_dram_addr of cm_access_control.c, there is a possible out of bounds read due to an integer overflow. This c... |
| CVE-2021-1046 | MEDIUM | 4.4 | 0.1% | Dec 15, 2021 | In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check. ... |
| CVE-2021-1043 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to ... |
| CVE-2021-1042 | MEDIUM | 4.4 | 0.1% | Dec 15, 2021 | In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a use... |
| CVE-2021-1041 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local information... |
| CVE-2021-1038 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could le... |
| CVE-2021-1030 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way to determine whether an... |
| CVE-2021-1026 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In startRanging of RttServiceImpl.java, there is a possible way to determine whether an app is installed, without query ... |
| CVE-2021-1025 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In hasNamedWallpaper of WallpaperManagerService.java, there is a possible way to determine whether an app is installed, ... |
| CVE-2021-1024 | MEDIUM | 6.7 | 0.1% | Dec 15, 2021 | In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This c... |
| CVE-2021-1023 | MEDIUM | 5 | 0.1% | Dec 15, 2021 | In onCreate of RequestIgnoreBatteryOptimizations.java, there is a possible way to determine whether an app is installed,... |
| CVE-2021-1014 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is ins... |
| CVE-2021-1013 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible ... |
| CVE-2021-1012 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without... |
| CVE-2021-1011 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In setPackageStoppedState of PackageManagerService.java, there is a missing permission check. This could lead to local i... |
| CVE-2021-1010 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local informa... |
| CVE-2021-1009 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is inst... |
| CVE-2021-1008 | MEDIUM | 4.4 | 0.1% | Dec 15, 2021 | In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now