CVE-2021-0341: 
Java vulnerability analysis and mitigation

CVE-2021-0341 is a security vulnerability discovered in the verifyHostName function of OkHostnameVerifier.java. The vulnerability was disclosed in February 2021 and affects Android versions 8.1, 9, 10, and 11. The issue stems from improperly used cryptographic functions that could potentially allow accepting certificates for incorrect domains (MITRE CVE, Android Bulletin).

The vulnerability exists in the verifyHostName function of OkHostnameVerifier.java, where improper implementation of cryptographic functions could lead to certificate validation issues. The vulnerability has been assigned a CVSS base score indicating moderate severity, as it requires no special privileges or user interaction for exploitation (NVD).

The exploitation of this vulnerability could lead to remote information disclosure. The impact is particularly concerning as it requires no additional execution privileges and can be executed without user interaction (MITRE CVE).

The vulnerability can be exploited remotely without requiring additional execution privileges or user interaction. This makes it particularly accessible to potential attackers, though no known exploits in the wild have been publicly reported (MITRE CVE).

The vulnerability has been addressed in the Android Security Bulletin of February 2021. Users and administrators are advised to update their Android systems to the latest available version that includes the security patch (Android Bulletin).