CVE-2021-0517

In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code

published June 21, 2021

CVSS
—
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead to biasing of networking tasks to occur on non-VPN networks, which could lead to remote information disclosure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179053823

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00802 · 56.2th percentile
Published
2021-06-21T16:01Z
EPSS history
Timeline
  • 21 JUN 16:01Z
    In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code
    cvelistv5