2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-0961MEDIUM4.4In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could ...
CVE-2021-0958MEDIUM4.4In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. Thi...
CVE-2021-0956CRITICAL9.8In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect ...
CVE-2021-0955HIGH7In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local...
CVE-2021-0954HIGH7.3In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to ...
CVE-2021-0953HIGH7.8In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmar...
CVE-2021-0952MEDIUM5In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could...
CVE-2021-0933HIGH8In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to inte...
CVE-2021-0932HIGH7.8In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent...
CVE-2021-0931MEDIUM5.5In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data...
CVE-2021-0930HIGH8.8In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds ch...
CVE-2021-0929HIGH7.8In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use aft...
CVE-2021-0928HIGH7.8In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due t...
CVE-2021-0927HIGH7.8In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in ...
CVE-2021-0926HIGH7.8In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a mis...
CVE-2021-0925HIGH7.5In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This cou...
CVE-2021-0924HIGH7.8In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead ...
CVE-2021-0923HIGH7.8In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission c...
CVE-2021-0922HIGH7.8In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PROF...
CVE-2021-0921HIGH7.8In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due ...
CVE-2021-0920MEDIUM6.4In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loca...
CVE-2021-0919MEDIUM5In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lea...
CVE-2021-0918HIGH8.8In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This ...
CVE-2021-0904MEDIUM6.7In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escala...
CVE-2021-0889CRITICAL9.8In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to ...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now