CVE-2021-0394

Name of the Vulnerable Software and Affected Versions: Android versions Android-8.1 through Android-11

Description: In the android os Parcel readString8 function of android os Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations: For Android versions Android-8.1 through Android-11, update to a version that includes the fix for the out of bounds read issue in android os Parcel readString8. As a temporary workaround, consider restricting access to sensitive information to minimize the risk of exploitation.