Android

CVEs (8,504)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-0664	Mediatek ccu	Med	0.44	6.7	0.00	Nov 18, 2021	In ccu, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827158; Issue ID: ALPS05827158.
CVE-2021-0658	Apusys apusys	Med	0.44	6.7	0.00	Nov 18, 2021	In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672107.
CVE-2021-0657	Apusys apusys	Med	0.44	6.7	0.00	Nov 18, 2021	In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672103; Issue ID: ALPS05672103.
CVE-2021-0656	Mediatek edma driver	Med	0.44	6.7	0.00	Nov 18, 2021	In edma driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05709376; Issue ID: ALPS05709376.
CVE-2021-0655	Mediatek mdlactl driver	Med	0.44	6.7	0.00	Nov 18, 2021	In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05673424; Issue ID: ALPS05673424.
CVE-2021-0629	Mediatek mdlactl driver	Med	0.44	6.7	0.00	Nov 18, 2021	In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05776625; Issue ID: ALPS05776625.
CVE-2021-0941	Google Android	Med	0.44	6.7	0.00	Oct 25, 2021	In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…
CVE-2021-0940	Google Android	Med	0.44	6.7	0.00	Oct 25, 2021	In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid…
CVE-2021-0935	Google Android	Med	0.44	6.7	0.00	Oct 25, 2021	In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid…
CVE-2021-0663	Mediatek audio DSP	Med	0.44	6.7	0.01	Oct 25, 2021	In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844458; Issue ID: ALPS05844458.
CVE-2021-0662	Mediatek audio DSP	Med	0.44	6.7	0.01	Oct 25, 2021	In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844434; Issue ID: ALPS05844434.
CVE-2021-0661	Mediatek audio DSP	Med	0.44	6.7	0.01	Oct 25, 2021	In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844413; Issue ID: ALPS05844413.
CVE-2021-0634	Mediatek display driver	Med	0.44	6.7	0.00	Oct 25, 2021	In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594994; Issue ID: ALPS05594994.
CVE-2021-0633	Mediatek display driver	Med	0.44	6.7	0.00	Oct 25, 2021	In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05585423; Issue ID: ALPS05585423.
CVE-2021-0625	Mediatek ccu	Med	0.44	6.7	0.00	Oct 25, 2021	In ccu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594996; Issue ID: ALPS05594996.
CVE-2021-0703	Google Android	Med	0.44	6.8	0.00	Oct 22, 2021	In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privilege if the attacker has physical access to the device, with no additional execution privileges needed. User interaction is not…
CVE-2021-0691	Google Android	Med	0.44	6.7	0.00	Oct 6, 2021	In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in other processes due to an overly-permissive SELinux policy. This could lead to local escalation of privilege with System execution privileges needed. User…
CVE-2021-0628	Mediatek OMA DRM	Med	0.44	6.7	0.00	Aug 18, 2021	In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722454; Issue ID: ALPS05722454.
CVE-2021-0627	Mediatek OMA DRM	Med	0.44	6.7	0.00	Aug 18, 2021	In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722434; Issue ID: ALPS05722434.
CVE-2021-0626	Mediatek ged	Med	0.44	6.7	0.00	Aug 18, 2021	In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05687510; Issue ID: ALPS05687510.

CVE-2021-0664MedNov 18, 2021
Mediatek
ccu
risk 0.44cvss 6.7epss 0.00
In ccu, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827158; Issue ID: ALPS05827158.
CVE-2021-0658MedNov 18, 2021
Apusys
apusys
risk 0.44cvss 6.7epss 0.00
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672107.
CVE-2021-0657MedNov 18, 2021
Apusys
apusys
risk 0.44cvss 6.7epss 0.00
In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672103; Issue ID: ALPS05672103.
CVE-2021-0656MedNov 18, 2021
Mediatek
edma driver
risk 0.44cvss 6.7epss 0.00
In edma driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05709376; Issue ID: ALPS05709376.
CVE-2021-0655MedNov 18, 2021
Mediatek
mdlactl driver
risk 0.44cvss 6.7epss 0.00
In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05673424; Issue ID: ALPS05673424.
CVE-2021-0629MedNov 18, 2021
Mediatek
mdlactl driver
risk 0.44cvss 6.7epss 0.00
In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05776625; Issue ID: ALPS05776625.
CVE-2021-0941MedOct 25, 2021
Google
Android
risk 0.44cvss 6.7epss 0.00
In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…
CVE-2021-0940MedOct 25, 2021
Google
Android
risk 0.44cvss 6.7epss 0.00
In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid…
CVE-2021-0935MedOct 25, 2021
Google
Android
risk 0.44cvss 6.7epss 0.00
In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid…
CVE-2021-0663MedOct 25, 2021
Mediatek
audio DSP
risk 0.44cvss 6.7epss 0.01
In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844458; Issue ID: ALPS05844458.
CVE-2021-0662MedOct 25, 2021
Mediatek
audio DSP
risk 0.44cvss 6.7epss 0.01
In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844434; Issue ID: ALPS05844434.
CVE-2021-0661MedOct 25, 2021
Mediatek
audio DSP
risk 0.44cvss 6.7epss 0.01
In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844413; Issue ID: ALPS05844413.
CVE-2021-0634MedOct 25, 2021
Mediatek
display driver
risk 0.44cvss 6.7epss 0.00
In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594994; Issue ID: ALPS05594994.
CVE-2021-0633MedOct 25, 2021
Mediatek
display driver
risk 0.44cvss 6.7epss 0.00
In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05585423; Issue ID: ALPS05585423.
CVE-2021-0625MedOct 25, 2021
Mediatek
ccu
risk 0.44cvss 6.7epss 0.00
In ccu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594996; Issue ID: ALPS05594996.
CVE-2021-0703MedOct 22, 2021
Google
Android
risk 0.44cvss 6.8epss 0.00
In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privilege if the attacker has physical access to the device, with no additional execution privileges needed. User interaction is not…
CVE-2021-0691MedOct 6, 2021
Google
Android
risk 0.44cvss 6.7epss 0.00
In the SELinux policy configured in system_app.te, there is a possible way for system_app to gain code execution in other processes due to an overly-permissive SELinux policy. This could lead to local escalation of privilege with System execution privileges needed. User…
CVE-2021-0628MedAug 18, 2021
Mediatek
OMA DRM
risk 0.44cvss 6.7epss 0.00
In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722454; Issue ID: ALPS05722454.
CVE-2021-0627MedAug 18, 2021
Mediatek
OMA DRM
risk 0.44cvss 6.7epss 0.00
In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722434; Issue ID: ALPS05722434.
CVE-2021-0626MedAug 18, 2021
Mediatek
ged
risk 0.44cvss 6.7epss 0.00
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05687510; Issue ID: ALPS05687510.

Page 251 of 426