Skip to content
OpenAdvisories
Unscored CVE-2021-0889 EUVD-2021-3508GHSA-56fq-7jc4-6x2c

In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code executi…

Published Dec 15, 2021 · Updated Aug 3, 2024 · Assigned by google_android

Platform: Android

Description

In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-8.1 Android-9Android ID: A-180745296

Affected products

VendorProductAffectedFixed
— Android Android-10 Android-11 Android-12 Android-8.1 Android-9 —

References