PT-2022-10970 · Google · Android Kernel
Published
2022-02-11
·
Updated
2022-02-18
·
CVE-2021-39687
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to a heap buffer overflow in the HandleTransactionIoEvent function of actuator driver.cc, which could lead to a possible out of bounds read. This might result in local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations
For Android kernel, apply the necessary patch to fix the heap buffer overflow issue in the HandleTransactionIoEvent function of actuator driver.cc.
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android Kernel