VDB

CVE-2021-0975

CVE-2021-0975 PUBLISHED CVSS 5.5 MEDIUM

In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure of installed packages with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-180104273

EPSS 0.10% · 0.8th percentile

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.10%
0.8th percentile

Affected Products

VendorProductVersions
googleandroid13.0.0
n/aAndroidAndroid-13

Timeline

  • Aug 11, 2022 CVE Published
  • Aug 12, 2022 EPSS Score
  • Aug 16, 2022 EPSS Score
  • Sep 27, 2022 EPSS Score
  • Nov 12, 2022 EPSS Score
  • Dec 29, 2022 EPSS Score
  • Feb 13, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 31, 2023 EPSS Score
  • Jul 1, 2023 EPSS Score
  • Aug 16, 2023 EPSS Score
  • Oct 2, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›