CVE-2021-0673

—

CVSS 3.1

7.8 high

EPSS

<1%p50

Published

Dec 17, 2021 (Dec 17, 2021)

Modified

Jun 17, 2026

Description

In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05977326; Issue ID: ALPS05977326.

Vendors: google
Products: android
Weakness: CWE-862
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news3 stories

Multiple Bugs Enable Eavesdropping on 37% of Android Phones

Infosecurity MagazineNov 24, 11:00 UTC · Nov 24, 2021Vulnerability CVE-2021-0661 CVE-2021-0662 CVE-2021-0663+1 CVEs

Eavesdropping bug impacts roughly a third of the world's smartphones

The RecordDec 19, 00:00 UTC · Dec 19, 2022Vulnerability CVE-2021-0661 CVE-2021-0662 CVE-2021-0663+1 CVEs

Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally

The Hacker NewsNov 25, 04:50 UTC · Nov 25, 2021Vulnerability CVE-2021-0661 CVE-2021-0662 CVE-2021-0663+1 CVEs