CVE-2021-0639

2021-08-1718:29:27

google_android

www.cve.org

libl3oemcrypto.cpp

local information disclosure

sensitive data

obfuscation

android soc

a-190724551

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to the way sensitive data is handled. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-190724551

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android SoC"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2021-08-01