PT-2021-2465

CVE-2021-0457

·

Published

2021-03-01

·

Updated

2021-03-15

Description by

CVSS 2.0
4.6
Medium
MetricsAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Android kernel
Description The issue is related to a heap buffer overflow in the FingerTipS touch screen driver, which could lead to a local escalation of privilege. This requires System execution privileges and does not need user interaction for exploitation.
Recommendations For Android kernel, consider applying a patch or fix to address the heap buffer overflow issue in the FingerTipS touch screen driver as soon as one becomes available. As a temporary workaround, restricting access to the fts driver test write function may help minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾