PT-2021-13026

CVE-2021-0347

Published

2021-02-04

Updated

2021-02-23

Description by

CVSS 3.1

4.4

Medium

MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Android versions Android-8.1 through Android-11

Description: The issue is related to a possible out of bounds read due to a missing bounds check in the ccu component. This could lead to local information disclosure, requiring System execution privileges. User interaction is necessary for exploitation.

Recommendations: For Android versions Android-8.1 through Android-11, apply the patch with ID ALPS05377188 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Le Wu

吴乐

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers