PT-2021-12985 · Google · Android Soc

Published 2021-01-11 · Updated 2021-01-13 · CVE-2021-0301

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Android SoC

Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is not required for exploitation.

Recommendations: For Android SoC, apply the fix provided by the Android team to address the missing bounds check issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-0301

Affected Products

Android Soc

References · 2

• https://source.android.com/security/bulletin/2021-01-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0301 · Security Note