PT-2021-2484 · Google · Android Kernel

Published 2021-03-01 · Updated 2021-03-16 · CVE-2021-0463

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Android kernel versions (affected versions not specified)

Description: The issue is related to the implementation of the convertToHidl function in the Camera component of the Android operating system kernel. It involves the use of an uninitialized resource, which can lead to local information disclosure. Exploitation of this issue may allow an attacker to gain unauthorized access to protected information. User interaction is required for exploitation.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Use of Uninitialized Resource

Weakness Enumeration

CWE-125

CWE-908

Related Identifiers

BDU:2021-01855

CVE-2021-0463

Affected Products

Android Kernel

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-0463 · Security Note
• https://source.android.com/security/bulletin/pixel/2021-03-01 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01855 · Security Note