PT-2021-5450

CVE-2021-0967

·

Published

2021-09-15

·

Updated

2021-12-17

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12
Description The issue is related to a missing bounds check in the vorbis book decodev set function of the Media Framework component, which could lead to an out of bounds write. This might result in remote information disclosure, and user interaction is required for exploitation. The vulnerability could potentially allow a remote attacker to gain unauthorized access to protected information.
Recommendations For Android versions Android-9 through Android-12, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾