{"id":"CVE-2021-0904","aliases":["A-201779035","ASB-A-201779035","EUVD-2021-3523","GHSA-pf4w-mhjv-g5wm","M-ALPS06076938"],"status":"published","title":"In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This...","description":"In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06076938; Issue ID: ALPS06076938.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00139,"percentile":0.03314,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-276","CWE-732"],"published":"2021-12-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2021-12-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2021-12-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://corp.mediatek.com/product-security-bulletin/December-2021","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0904"},{"url":"https://source.android.com/security/bulletin/2021-12-01","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pf4w-mhjv-g5wm"}],"sources":{"cve":[{"id":"CVE-2021-0904","description":"In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06076938; Issue ID: ALPS06076938.","status":"published","published":"2021-12-15T18:05:52Z","modified":"2024-08-03T15:55:16.846Z","updated_at":"2026-11-02T14:33:10.887946Z"}],"euvd":[{"id":"EUVD-2021-3523","description":"In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06076938; Issue ID: ALPS06076938.","status":"published","published":"2021-12-15T18:05:52Z","modified":"2024-08-03T15:55:16Z","updated_at":"2026-11-03T03:25:16.085901Z"}],"ghsa":[{"id":"GHSA-pf4w-mhjv-g5wm","title":"In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This...","description":"In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-201779035","status":"published","published":"2021-12-16T00:01:32Z","modified":"2023-02-01T05:07:09Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-276","CWE-732"],"updated_at":"2026-11-02T14:50:29.480738Z"}],"nvd":[{"id":"CVE-2021-0904","description":"In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06076938; Issue ID: ALPS06076938.","status":"published","published":"2021-12-15T19:15:10.893Z","modified":"2026-06-17T03:30:39.093Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:07:02.189991Z"}],"osv":[{"id":"ASB-A-201779035","description":"In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2021-12-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:05.376141Z"}]}}