CVE-2021-0705

HIGH

Android - Local Privilege Escalation via Background Service Restriction Bypass

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2021-0705. PoCs published by Trinadh465, ShaikUsaf.

AI-analyzed exploit summary This repository contains performance test cases for Android's autofill framework, specifically targeting CVE-2021-0705. The code includes test cases for autofill functionality but does not contain an actual exploit. It appears to be part of a performance testing suite rather than an exploit PoC.

Description

In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of Background Service Restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-185388103

Exploits (2)

nomisec WRITEUP
by Trinadh465 · poc
https://github.com/Trinadh465/frameworks_base_AOSP10_r33_CVE-2021-0705

This repository contains performance test cases for Android's autofill framework, specifically targeting CVE-2021-0705. The code includes test cases for autofill functionality but does not contain an actual exploit. It appears to be part of a performance testing suite rather than an exploit PoC.

Classification
Writeup 90%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: Android Autofill Framework (AOSP10_r33)
No auth needed
Prerequisites: Android device with autofill framework · Access to performance testing environment
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WRITEUP
by ShaikUsaf · poc
https://github.com/ShaikUsaf/frameworks_base_AOSP10_r33_CVE-2021-0705

This repository contains performance test cases for Android's autofill framework, specifically targeting CVE-2021-0705. The code includes test cases for autofill functionality but does not contain an actual exploit or malicious payload.

Classification
Writeup 90%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: Android Autofill Framework (AOSP10_r33)
No auth needed
Prerequisites: Android device with autofill framework · Test environment setup
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://source.android.com/security/bulletin/2021-10-01

Scores

CVSS v3 7.8
EPSS 0.0025
EPSS Percentile 16.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (2)
google/android 10.0
google/android 11.0
Published Oct 22, 2021
Tracked Since Feb 18, 2026