2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-1017 | HIGH | 7.8 | 0.1% | Dec 15, 2021 | In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connec... |
| CVE-2021-1016 | HIGH | 7.3 | 0.1% | Dec 15, 2021 | In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user c... |
| CVE-2021-1015 | LOW | 3.3 | 0.1% | Dec 15, 2021 | In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, witho... |
| CVE-2021-1014 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is ins... |
| CVE-2021-1013 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible ... |
| CVE-2021-1012 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without... |
| CVE-2021-1011 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In setPackageStoppedState of PackageManagerService.java, there is a missing permission check. This could lead to local i... |
| CVE-2021-1010 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local informa... |
| CVE-2021-1009 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is inst... |
| CVE-2021-1008 | MEDIUM | 4.4 | 0.1% | Dec 15, 2021 | In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a... |
| CVE-2021-1007 | MEDIUM | 4.4 | 0.1% | Dec 15, 2021 | In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This ... |
| CVE-2021-1006 | MEDIUM | 4.4 | 0.1% | Dec 15, 2021 | In several functions of DatabaseManager.java, there is a possible leak of Bluetooth MAC addresses due to log information... |
| CVE-2021-1005 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installe... |
| CVE-2021-1004 | HIGH | 7.8 | 0.1% | Dec 15, 2021 | In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, with... |
| CVE-2021-1003 | HIGH | 7.8 | 0.1% | Dec 15, 2021 | In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change audio stream volume d... |
| CVE-2021-1002 | HIGH | 7.5 | 0.8% | Dec 15, 2021 | In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could le... |
| CVE-2021-1001 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In PVInitVideoEncoder of mp4enc_api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This coul... |
| CVE-2021-0999 | HIGH | 7.8 | 0.1% | Dec 15, 2021 | In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection ... |
| CVE-2021-0998 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In 'ih264e_find_bskip_params()' of ih264e_me.c, there is a possible out of bounds read due to a heap buffer overflow. Th... |
| CVE-2021-0997 | MEDIUM | 5.5 | 0.1% | Dec 15, 2021 | In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log infor... |
| CVE-2021-0996 | MEDIUM | 4.5 | 0.2% | Dec 15, 2021 | In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This cou... |
| CVE-2021-0995 | LOW | 3.3 | 0.1% | Dec 15, 2021 | In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an a... |
| CVE-2021-0994 | LOW | 3.3 | 0.1% | Dec 15, 2021 | In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is install... |
| CVE-2021-0993 | MEDIUM | 6.5 | 0.6% | Dec 15, 2021 | In getOffsetBeforeAfter of TextLine.java, there is a possible denial of service due to resource exhaustion. This could l... |
| CVE-2021-0992 | LOW | 3.3 | 0.1% | Dec 15, 2021 | In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app without user consent d... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now