CVE-2021-0407

2021-08-1814:43:24

google_android

www.cve.org

insecure bounds check

privilege escalation

clk driver

local exploit

patch alps05479659

EPSS

Percentile

5.1%

JSON

In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05479659; Issue ID: ALPS05479659.

CNA Affected

[
  {
    "product": "MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6833, MT6853, MT6853T, MT6873, MT6885, MT6889, MT6893",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android 10.0, 11.0"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/August-2021

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2021-0407