PT-2021-13042

CVE-2021-0363

Published

2021-02-02

Updated

2021-02-23

Description by

CVSS 3.1

6.7

Medium

MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-11

Description: In the mobile log d component, a command injection issue exists due to a missing bounds check. This could lead to local escalation of privilege, requiring System execution privileges, and does not need user interaction for exploitation.

Recommendations: For Android versions Android-10 through Android-11, apply the patch with ID ALPS05458478 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Dongxiang Ke

Lewei Qu

Vendors

Affected products

Weakness enumeration

CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')

Related identifiers