CVE-2021-1048VulnerabilityPublished 05/23/2022Updated 10/24/2026

CVE-2021-1048: Android Kernel Use-After-Free Vulnerability

Affects Android KernelSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 05/23/2022
KEV deadline: 06/13/2022
EPSS: 1.1% chance of exploitation in 30 days – higher than 64% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-1048 (opens in a new tab)

Description

CVE-2021-1048 is a use-after-free vulnerability in the Android kernel that enables privilege escalation. It has been exploited in the wild, indicating active attacks leveraging this flaw. The vulnerability affects the Android kernel but specific affected versions are not stated. No patch or remediation details are provided in the available data.

Summary

This vulnerability in the Android kernel involves a use-after-free condition (CWE-416) that can be exploited to escalate privileges on affected devices. The flaw has been confirmed to be exploited in the wild, highlighting its practical impact. However, no explicit information about affected Android kernel versions or available patches is provided in the input data.

Impact

Successful exploitation allows an attacker to escalate privileges on the affected Android device, potentially gaining unauthorized access to sensitive system functions or data. The presence of known exploits in the wild underscores the active risk posed by this vulnerability.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes are confirmed, users should monitor vendor communications and apply updates promptly once available.

Weaknesses

CWE-416Use After Free (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:42:01 UTC

Weaknesses

References

Related threats