CVE-2021-0505

Name of the Vulnerable Software and Affected Versions: Android versions Android-11

Description: The issue is related to a missing permission check in the Settings app, which could allow disabling an always-on VPN. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.

Recommendations: For Android version Android-11, consider restricting access to the Settings app until a patch is available. As a temporary workaround, avoid using the always-on VPN feature in the affected versions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.