PT-2021-13078

CVE-2021-0401

·

Published

2021-02-26

·

Updated

2021-03-02

Description by

CVSS 2.0
6.9
Medium
MetricsAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-11
Description: The issue is related to a possible memory corruption due to a race condition in vow. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is required for exploitation.
Recommendations: For Android versions Android-10 through Android-11, apply the patch with ID ALPS05418265 to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')
Related identifiers
CVE-2021-0401
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com