Lucene search

Google_androidCVELIST:CVE-2021-0584

HistoryAug 17, 2021 - 6:28 p.m.

CVE-2021-0584

2021-08-1718:28:10

google_android

www.cve.org

parcel.cpp

out of bounds read

local information disclosure

android-11

android-8.1

android-9

android-10

a-179289794

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-179289794

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11 Android-8.1 Android-9 Android-10"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2021-08-01