Lucene search

Google_androidCVE-2021-0893

HistoryDec 17, 2021 - 5:15 p.m.

CVE-2021-0893

2021-12-1717:15:11

CWE-416

google_android

web.nvd.nist.gov

cve-2021-0893

apusys

memory corruption

local privilege escalation

use after free

nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05687474.

Affected configurations

Nvd

Vulners

Node

mediatekmt6873Match-

mediatekmt6875Match-

mediatekmt6877Match-

mediatekmt6883Match-

mediatekmt6885Match-

mediatekmt6889Match-

mediatekmt6891Match-

mediatekmt6893Match-

mediatekmt8195Match-

mediatekmt8791Match-

mediatekmt8797Match-

AND

googleandroidMatch10.0

googleandroidMatch11.0

googleandroidMatch12.0

VendorProductVersionCPE
mediatekmt6873-cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*
mediatekmt6875-cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*
mediatekmt6877-cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*
mediatekmt6883-cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*
mediatekmt6885-cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*
mediatekmt6889-cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*
mediatekmt6891-cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*
mediatekmt6893-cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*
mediatekmt8195-cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*
mediatekmt8791-cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mediatek	mt6873	-	cpe:2.3:h:mediatek:mt6873:-:::::::*
mediatek	mt6875	-	cpe:2.3:h:mediatek:mt6875:-:::::::*
mediatek	mt6877	-	cpe:2.3:h:mediatek:mt6877:-:::::::*
mediatek	mt6883	-	cpe:2.3:h:mediatek:mt6883:-:::::::*
mediatek	mt6885	-	cpe:2.3:h:mediatek:mt6885:-:::::::*
mediatek	mt6889	-	cpe:2.3:h:mediatek:mt6889:-:::::::*
mediatek	mt6891	-	cpe:2.3:h:mediatek:mt6891:-:::::::*
mediatek	mt6893	-	cpe:2.3:h:mediatek:mt6893:-:::::::*
mediatek	mt8195	-	cpe:2.3:h:mediatek:mt8195:-:::::::*
mediatek	mt8791	-	cpe:2.3:h:mediatek:mt8791:-:::::::*

Rows per page:

1-10 of 141

CNA Affected

[
  {
    "product": "MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android 10.0, 11.0, 12.0"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/December-2021

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-0893