PT-2022-11009 · Google · Android Kernel
Published
2022-03-16
·
Updated
2022-03-23
·
CVE-2021-39731
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to a possible out of bounds write in the ProtocolStkProactiveCommandAdapter::Init function, located in protocolstkadapter.cpp. This is due to an incorrect bounds check, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and user interaction is not required.
Recommendations
For Android kernel, consider applying a patch that corrects the bounds check in the ProtocolStkProactiveCommandAdapter::Init function to prevent out of bounds writes.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android Kernel