PT-2021-13045

CVE-2021-0366

·

Published

2021-02-26

·

Updated

2021-03-02

Description by

CVSS 2.0
6.9
Medium
MetricsAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-11
Description: In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Recommendations: For Android versions Android-10 through Android-11, apply the patch with ID ALPS05371580 to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')
Related identifiers
CVE-2021-0366
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com