CVE-2021-0354

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05431161.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*

History

23 Feb 2021, 22:28

Type Values Removed Values Added
CPE cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*

23 Feb 2021, 05:15

Type Values Removed Values Added
Summary In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05431161. In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05431161.

04 Feb 2021, 15:33

Type Values Removed Values Added
References (MISC) https://corp.mediatek.com/product-security-acknowledgements - (MISC) https://corp.mediatek.com/product-security-acknowledgements - Third Party Advisory
CWE CWE-190
CWE-787
CPE cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 4.6
v3 : 6.7

03 Feb 2021, 00:56

Type Values Removed Values Added
New CVE

Information

Published : 2021-02-03 00:15

Updated : 2023-12-10 13:41


NVD link : CVE-2021-0354

Mitre link : CVE-2021-0354

CVE.ORG link : CVE-2021-0354


JSON object : View

Products Affected

google

  • android
CWE
CWE-190

Integer Overflow or Wraparound

CWE-787

Out-of-bounds Write