PT-2021-13274 · Google · Android

Published 2021-09-01 · Updated 2021-10-08 · CVE-2021-0636

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android version Android-10

Description The issue occurs when extracting an incorrectly formatted avi file, resulting in memory damage. The playback interface indicates that the video cannot be played, and the log is found to be crashed. This problem may lead to malicious code attacks by hackers, resulting in the loss of user rights.

Recommendations For Android version Android-10, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

ASB-A-189392423

CVE-2021-0636

U-1600513

Affected Products

Android

References · 6

• https://osv.dev/vulnerability/CVE-2021-0636 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0636 · Security Note
• https://source.android.com/security/bulletin/2021-09-01 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-189392423 · Vendor Advisory
• https://t.me/cvenotify/21994 · Telegram Post
• https://t.me/cibsecurity/30050 · Telegram Post