PT-2021-2472 · Google · Titan M+1

Published 2021-03-01 · Updated 2021-03-12 · CVE-2021-0452

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to the Titan M security module in Android operating systems and is caused by initialization errors. This could lead to local information disclosure with System execution privileges needed, allowing an attacker to gain unauthorized access to protected information. User interaction is not needed for exploitation.

Recommendations For Android kernel, consider applying a patch or fix to address the uninitialized data issue in the Titan M chip firmware as soon as it becomes available. As a temporary workaround, restrict access to sensitive information and ensure that the system execution privileges are properly configured to minimize the risk of exploitation.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2021-01839

CVE-2021-0452

Affected Products

Android Kernel

Titan M

References · 5

• https://bdu.fstec.ru/vul/2021-01839 · Security Note
• https://source.android.com/security/bulletin/pixel/2021-03-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0452 · Security Note
• https://t.me/cvenotify/11218 · Telegram Post
• https://t.me/cibsecurity/24710 · Telegram Post