PT-2021-13246 · Google · Android Kernel

Published 2021-06-22 · Updated 2021-06-25 · CVE-2021-0607

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Android kernel

Description: The issue is related to a missing bounds check in the iaxxx calc i2s div function of iaxxx-codec.c, which could allow a hardware port write with user-controlled data. This might lead to local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations: For Android kernel, apply the necessary patch to fix the missing bounds check in the iaxxx calc i2s div function to prevent potential local escalation of privilege.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-0607

Affected Products

Android Kernel

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2021-0607 · Security Note
• https://source.android.com/security/bulletin/pixel/2021-06-01 · Vendor Advisory