CVE-2021-0534

Published Jun 22, 2021 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170639543

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-3153 In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170639543
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
google_android
Published
Updated
Aug 3, 2024, 3:40 PM
Reserved
Nov 6, 2020, 12:00 AM
Status
Modified
Published
Jun 22, 2021, 11:15 AM
Modified
Jun 17, 2026, 3:30 AM