PT-2022-10967 · Google · Android Kernel
Published
2022-01-14
·
Updated
2022-01-20
·
CVE-2021-39682
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to an incorrect bounds check in the mgm alloc page function of memory group manager.c, which could lead to a possible out of bounds write. This might result in local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations
For Android kernel, apply the necessary patch to fix the incorrect bounds check in the mgm alloc page function of memory group manager.c to prevent potential out of bounds write and local escalation of privilege.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android Kernel