Lucene search

K
cvelistGoogle_androidCVELIST:CVE-2021-0393
HistoryMar 10, 2021 - 3:37 p.m.

CVE-2021-0393

2021-03-1015:37:06
google_android
www.cve.org
6
scanner
literalbuffer
newcapacity
integer overflow
remote code execution
pac file
android-11
android-8.1
android-9
android-10
a-168041375

EPSS

0.001

Percentile

21.4%

In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-168041375

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11 Android-8.1 Android-9 Android-10"
      }
    ]
  }
]

EPSS

0.001

Percentile

21.4%

Related for CVELIST:CVE-2021-0393