CVE-2021-0918

In gattprocessnotification of gattcl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0918

CVE-2021-0918 affects Android 12 with a Bluetooth GATT vulnerability: in gatt_process_notification (gatt_cl.cc) an out-of-bounds write due to missing bounds check could enable remote code execution via a specially crafted Bluetooth transmission. Exploitation requires no user interaction and can o...

CVE-2021-0918

creationtimestamp| type| source ---|---|--- 2021-11-03 13:19:19+00:00| seen| https://t.me/truesecator/2282 2021-11-03 20:58:12+00:00| seen| https://t.me/NeKaspersky/1415 2021-12-15 22:46:59+00:00| seen| https://t.me/cibsecurity/34100...

Google Warns of New Android 0-Day Vulnerability Under Active Targeted Attacks

Google has rolled out its monthly security patches for Android with fixes for 39 flaws, including a zero-day vulnerability that it said is being actively exploited in the wild in limited, targeted attacks. Tracked as CVE-2021-1048, the zero-day bug is described as a use-after-free vulnerability i...

Google patches zero-day vulnerability, and others, in Android

Google has issued security patches for the Android Operating System. In total, the patches address 39 vulnerabilities. There are indications that one of the patched vulnerabilities may be under limited, targeted exploitation. The most severe of these issues is a critical security vulnerability in...