PT-2021-13039

CVE-2021-0360

Published

2021-02-02

Updated

2021-02-24

Description by

CVSS 3.1

6.7

Medium

MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-11

Description: The issue is related to an incorrect bounds check in netdiag, which could lead to a possible out of bounds write. This may result in local escalation of privilege, requiring System execution privileges. No user interaction is needed for exploitation.

Recommendations: For Android versions Android-10 through Android-11, apply the patch with ID ALPS05442006 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Le Wu

吴乐

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers