CVE-2021-0317
published 2021-01-11CVE-2021-0317: In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of…
PriorityP336high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.20%
10.0th percentile
In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10, Android-11, Android-8.0, Android-8.1, Android-9; Android ID: A-168319670.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | frameworks_base | >= 10:0 < 10:2021-01-01 | 10:2021-01-01 |
| platform | frameworks_base | >= 11:0 < 11:2021-01-01 | 11:2021-01-01 |
| platform | frameworks_base | >= 8.0:0 < 8.0:2021-01-01 | 8.0:2021-01-01 |
| platform | frameworks_base | >= 8.1:0 < 8.1:2021-01-01 | 8.1:2021-01-01 |
| platform | frameworks_base | >= 9:0 < 9:2021-01-01 | 9:2021-01-01 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2021-0317: Android Security Bulletin 2021-01-01
CVE: CVE-2021-0317
Severity: HIGH
Type: EoP
Affected AOSP versions: 8
vendor_android·2021-01-01·CVSS 7.8
CVE-2021-0317 [HIGH] CVE-2021-0317: Android Security Bulletin 2021-01-01
CVE: CVE-2021-0317
Severity: HIGH
Type: EoP
Affected AOSP versions: 8
Android Security Bulletin 2021-01-01
CVE: CVE-2021-0317
Severity: HIGH
Type: EoP
Affected AOSP versions: 8.0, 8.1, 9, 10, 11
References: A-168319670
GHSA
GHSA-j7m5-9hhg-47p4: In createOrUpdate of Permission
ghsa_unreviewed·2022-05-24
CVE-2021-0317 [HIGH] CWE-269 GHSA-j7m5-9hhg-47p4: In createOrUpdate of Permission
In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10, Android-11, Android-8.0, Android-8.1, Android-9; Android ID: A-168319670.
OSV
CVE-2021-0317: In createOrUpdate of Permission
osv·2021-01-01
CVE-2021-0317 CVE-2021-0317: In createOrUpdate of Permission
In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-01-11
Published