CVE-2021-0691 — Vulnetix

Try Vulnetix Request Demo

CVE-2021-0691 PUBLISHED CVSS 6.699999809265137 MEDIUM

In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in other processes due to an overly-permissive SELinux policy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-188554048

EPSS 0.03% · 9.8th percentile

Risk Scores

CVSS v3.1

6.699999809265137

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.03%

9.8th percentile

Affected Products

Vendor	Product	Versions
google	android	11.0
n/a	Android	Android-11

Timeline

Sep 8, 2021 CVE Published
Oct 7, 2021 EPSS Score
Dec 2, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Jan 27, 2022 EPSS Score
Mar 24, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 20, 2022 EPSS Score
Jul 16, 2022 EPSS Score
Sep 10, 2022 EPSS Score
Nov 5, 2022 EPSS Score
Dec 31, 2022 EPSS Score

References

https://source.android.com/security/bulletin/2021-09-01 advisory
https://source.android.com/security/bulletin/pixel/2021-09-01 advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-0691 advisory

Open in Interactive Console →