VULNERABILITY INTELLIGENCE
CVE-2021-0338
CVSS score5.5 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2021-02-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156260178
Weakness classification
- nvd@nist.gov: CWE-770
Primary references
- security@android.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory