CVE-2021-0617

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561391; Issue ID: ALPS05561391...

CVE-2021-0616

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561389; Issue ID: ALPS05561389...

CVE-2021-0615

In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561369; Issue ID: ALPS05561369...

CVE-2021-0615

The CVE-2021-0615 entry concerns Mediatek’s flv extractor. The vulnerability is an out-of-bounds read caused by an integer overflow in the flv extractor’s processing, enabling local information disclosure without extra execution privileges. Impact is described as partial confidentiality loss with...

CVE-2021-0614

The CVE-2021-0614 entry concerns MediaTek’s asf extractor, where an out-of-bounds read results from an incorrect bounds check. This vulnerability may lead to local information disclosure without requiring user interaction or additional execution privileges. Affected reality is supported by source...

CVE-2021-0414

In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561384; Issue ID: ALPS05561384...

CVE-2021-0412

The CVE-2021-0412 issue affects the MediaTek flv extractor and is caused by a missing bounds check that enables an out-of-bounds read. This leads to local information disclosure without additional execution privileges. Documents note no user interaction is required for exploitation. A patch is re...

CVE-2021-0412

In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561366; Issue ID: ALPS05561366...

CVE-2021-0411

In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561362; Issue ID: ALPS05561362...

CVE-2021-0411

CVE-2021-0411 affects the MediaTek flv extractor. The vulnerability is an out-of-bounds read caused by an integer overflow in the component, enabling local information disclosure without additional execution privileges or user interaction. Mitigation/patch reference: ALPS05561362 (Issue ID ALPS05...

CVE-2021-0410

In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561360; Issue ID: ALPS05561360...

CVE-2021-0410

CVE-2021-0410 affects MediaTek’s flv extractor. A faulty bounds check enables an out-of-bounds read that can disclose local information without extra privileges; user interaction is not required. The entry lists patch ALPS05561360 (Issue ALPS05561360). Connected records confirm the issue across m...

CVE-2021-0409

CVE-2021-0409 affects the MediaTek flv extractor, where an out-of-bounds read can occur due to an incorrect bounds check. This may lead to local information disclosure without requiring user interaction. The issue is documented with patch ID ALPS05561359 / Issue ID ALPS05561359. Connected sources...

MediaTek asf extractor 缓冲区错误漏洞

MediaTek asf extractor is a chipset from China's MediaTek Mediatek. MediaTek asf extractor suffers from a buffer error vulnerability that stems from incorrect boundary checking, where an out-of-bounds read may occur. This could result in the disclosure of local information without additional...

MediaTek asf extractor 缓冲区错误漏洞

MediaTek asf extractor is a chipset from China's MediaTek Mediatek. MediaTek asf extractor suffers from a buffer error vulnerability that stems from incorrect boundary checking, where an out-of-bounds read may occur. This could result in the disclosure of local information without additional...

MediaTek flv extractor 缓冲区错误漏洞

MediaTek flv extractor is a chipset from China's MediaTek Mediatek. A security vulnerability exists in MediaTek flv extractor that stems from incorrect boundary checking, which may result in out-of-bounds reads. This could lead to the disclosure of local information without additional execute...

MediaTek ape extractor 缓冲区错误漏洞

MediaTek ape extractor is a chipset from China's MediaTek Mediatek. MediaTek ape extractor suffers from a buffer error vulnerability that stems from a heap buffer overflow, where an out-of-bounds read may occur. This could result in the disclosure of local information without additional execute...

CVE-2021-0702

In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

Information disclosure

In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2021-0702

CVE-2021-0702 affects Android 11 in the Framework component tied to apexd.cpp RevertActiveSessions, enabling local information disclosure via an unintentional MediaStore downgrade. Exploitation requires user interaction, with the issue rated at MEDIUM severity (CVSSv3.1) and LOW/Med in CVSS2 depe...