PT-2021-13201 · Google · Android

Published 2021-06-22 · Updated 2021-06-24 · CVE-2021-0555

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Android versions Android-11

Description: The issue is related to a missing null check in the RenderStruct of protostream objectsource.cc, which could lead to a crash. This could result in a remote denial of service, and no additional execution privileges are needed for exploitation. User interaction is not required for exploitation.

Recommendations: For Android version Android-11, update to a version that includes the fix for the missing null check in RenderStruct of protostream objectsource.cc to prevent potential crashes and remote denial of service.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2021-0555

Affected Products

Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-0555 · Security Note
• https://osv.dev/vulnerability/CVE-2021-0555 · Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2021-06-01 · Vendor Advisory