Lucene search

[email protected]CVE-2021-0561

HistoryJun 22, 2021 - 11:15 a.m.

CVE-2021-0561

2021-06-2211:15:08

CWE-787

[email protected]

web.nvd.nist.gov

116

cve-2021-0561

android

security vulnerability

information disclosure

out of bounds write

bounds check

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174302683

Affected configurations

NVD

Node

googleandroidMatch11.0

Node

fedoraprojectfedoraMatch35

fedoraprojectfedoraMatch36

Node

debiandebian_linuxMatch9.0

debiandebian_linuxMatch10.0

CPENameOperatorVersion
google:androidgoogle androideq11.0
fedoraproject:fedorafedoraproject fedoraeq35
fedoraproject:fedorafedoraproject fedoraeq36
debian:debian_linuxdebian debian linuxeq9.0
debian:debian_linuxdebian debian linuxeq10.0

CPE	Name	Operator	Version
google:android	google android	eq	11.0
fedoraproject:fedora	fedoraproject fedora	eq	35
fedoraproject:fedora	fedoraproject fedora	eq	36
debian:debian_linux	debian debian linux	eq	9.0
debian:debian_linux	debian debian linux	eq	10.0

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11"
      }
    ]
  }
]