
Cloud Vulnerability DB
A community-led vulnerabilities database
A memory corruption vulnerability was identified in Android 11's wpasctrlmsgqueuetimeout function within ctrlifaceunix.c. The vulnerability, tracked as CVE-2021-0535 (Android ID: A-168314741), was disclosed in June 2021. This security flaw affects Android 11 systems and could potentially lead to local privilege escalation (Android Bulletin).
The vulnerability exists in the wpasctrlmsgqueuetimeout function of ctrlifaceunix.c, where a use-after-free condition can occur, potentially leading to memory corruption. The technical nature of this vulnerability is particularly concerning as it doesn't require user interaction for exploitation (CVE Mitre).
The vulnerability can lead to local privilege escalation, allowing an attacker to gain system execution privileges. This poses a significant security risk as it could enable unauthorized elevation of privileges on affected Android 11 devices (Debian Tracker).
The vulnerability was addressed in the Android Security Bulletin for June 2021. Users should ensure their Android devices are updated with the latest security patches to mitigate this vulnerability (Android Bulletin).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."