CVE-2021-0311

Name of the Vulnerable Software and Affected Versions: Android versions Android-8.0 through Android-11

Description: The issue is related to a missing bounds check in the ElementaryStreamQueue::dequeueAccessUnitH264() function of ESQueue.cpp. This could lead to a possible out of bounds write, resulting in remote information disclosure. No additional execution privileges are needed for exploitation, but user interaction is required.

Recommendations: For Android versions Android-8.0 through Android-11, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.