CVE-2021-0703

2021-10-2213:27:09

google_android

www.cve.org

0.0004 Low

EPSS

Percentile

15.9%

JSON

In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privilege if the attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-184569329

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2021-10-01

0.0004 Low

EPSS

Percentile

15.9%

JSON

Related for CVELIST:CVE-2021-0703