PT-2021-13176 · Google · Android

Published 2021-06-21 · Updated 2021-06-23 · CVE-2021-0529

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version

Description: The issue is related to a memory management driver, where improper locking can cause memory corruption. This could lead to local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations: For Android versions prior to the fixed version, consider applying the necessary patches or updates to resolve the issue. As a temporary workaround, consider restricting access to the memory management driver to minimize the risk of exploitation.

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2021-0529

Affected Products

Android

References · 3

• https://source.android.com/security/bulletin/2021-06-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0529 · Security Note
• https://t.me/cvenotify/16595 · Telegram Post