PT-2022-9130 · Google · Android

Published 2022-08-24 · Updated 2022-08-27 · CVE-2021-0891

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version

Description An unprivileged app can trigger the PowerVR driver to return an uninitialized heap memory, causing information disclosure.

Recommendations For Android versions prior to the fixed version, update to a version that includes the fix for this issue to prevent information disclosure.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2021-0891

Affected Products

Android

References · 4

• https://source.android.com/security/bulletin/2022-08-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0891 · Security Note
• https://t.me/cibsecurity/48644 · Telegram Post
• https://t.me/cvenotify/35242 · Telegram Post