CVE-2021-0681: Android System Properties Information Disclosure Vulnerability
Summary
CVE-2021-0681: In system properties, there is a possible information disclosure due to a missing permission check. Affects :unknown: versions >= SoCVersion:0, < SoCVersion:2021-09-05. Fixed in SoCVersion:2021-09-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android operating system is a widely used open-source platform that powers a variety of devices, including smartphones and tablets. It provides a rich application framework that allows developers to build innovative apps. However, like any software, it is susceptible to vulnerabilities. This specific vulnerability relates to the system properties of Android, where a missing permission check can lead to unauthorized access to sensitive information.
Vulnerability Detail
In the Android system properties, there exists a vulnerability due to a missing permission check. This flaw allows local information disclosure without requiring additional execution privileges. The vulnerability can be exploited without user interaction, making it a significant security concern. Attackers could potentially gain access to sensitive data stored within the system properties, which could lead to further exploitation or data breaches.
How To Fix
Minimum fixed version
SoCVersion:2021-09-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the patch by updating to the latest version of the Android system.
Conclusion
CVE-2021-0681 represents a significant vulnerability in the Android operating system that can lead to local information disclosure. It is crucial for users and developers to apply the necessary updates to mitigate the risks associated with this vulnerability. Regular monitoring and updates are essential for maintaining security.
See every vulnerability recorded for :unknown: →
FAQ
CVE-2021-0681 is a vulnerability in the Android operating system that allows local information disclosure due to a missing permission check in system properties.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The risks include unauthorized access to sensitive information stored in system properties, which could lead to further exploitation or data breaches.
No, user interaction is not needed for exploitation, making it a more severe security risk.
If you cannot update your device, it is recommended to limit access to sensitive information and monitor for any unusual activity until a patch can be applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
