PT-2021-13040 · Google · Android

Le Wu + 1 · Published 2021-02-02 · Updated 2021-02-04 · CVE-2021-0361

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Android version Android-11

Description: In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Recommendations: For Android version Android-11, apply the patch with ID ALPS05449968 to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2021-0361

Affected Products

Android

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-0361 · Security Note
• https://osv.dev/vulnerability/CVE-2021-0361 · Vendor Advisory
• https://t.me/cibsecurity/22986 · Telegram Post
• https://t.me/cvenotify/9291 · Telegram Post
• https://corp.mediatek.com/product-security-acknowledgements · Note