CVE-2021-0684

In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2021-0684

CVE-2021-0684 is an Android local privilege escalation affecting Android 8.1, 9, 10, and 11. The issue is described as an out-of-bounds write caused by a use-after-free in TouchInputMapper::sync, enabling a local attacker to escalate privileges without user interaction. Exploitation, if any, is n...