Vulnerabilities > CVE-2021-0517 - Always-Incorrect Control Flow Implementation vulnerability in Google Android 11.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead to biasing of networking tasks to occur on non-VPN networks, which could lead to remote information disclosure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179053823
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 |