PT-2021-13023
CVE-2021-0344
·
Published
2021-02-04
·
Updated
2021-02-23
Description by
CVSS 2.0
7.2
HighMetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Android versions Android-10 through Android-11
Description:
The issue is related to a possible memory corruption in mtkpower due to a missing bounds check. This could lead to local escalation of privilege, requiring System execution privileges. No user interaction is needed for exploitation.
Recommendations:
For Android versions Android-10 through Android-11, apply the patch with ID ALPS05437558 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾