PT-2021-13031 · Google · Android

Qqq · Published 2021-02-02 · Updated 2021-02-24 · CVE-2021-0352

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-11

Description: The issue is related to a possible memory corruption due to type confusion in the RT regmap driver. This could lead to local denial of service, with System execution privileges needed for exploitation. User interaction is not required for exploitation.

Recommendations: For Android versions Android-10 through Android-11, apply the patch with ID ALPS05453809 to resolve the issue.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2021-0352

Affected Products

Android

References · 7

• https://osv.dev/vulnerability/CVE-2021-0352 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0352 · Security Note
• https://t.me/cvenotify/10392 · Telegram Post
• https://t.me/cvenotify/10340 · Telegram Post
• https://t.me/cvenotify/9290 · Telegram Post
• https://t.me/cibsecurity/22988 · Telegram Post
• https://corp.mediatek.com/product-security-acknowledgements · Note