CVE-2021-0889

CVSS 3.1: 9.8 critical
EPSS: 2%p74
Published: Dec 15, 2021 · Dec 15, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-0889 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-8.1 Android-9Android ID: A-180745296

Vendors: google

Products: android

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news

2 stories

Google fixes actively exploited Zero

Security AffairsNov 3, 06:31 UTC · Nov 3, 2021Exploit / PoCExploitedCVE-2021-1048 CVE-2021-0918 CVE-2021-0930+33

Google Warns of New Android 0-Day Vulnerability Under Active Targeted Attacks

The Hacker NewsNov 3, 05:20 UTC · Nov 3, 2021VulnerabilityExploitedCVE-2021-1048 CVE-2021-0918 CVE-2021-0930+81