CVE-2021-0311: High severity Google Android vulnerability

Published Jan 4, 2021

Updated

In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170240631.

Affected Software

6 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android=11.0

Google Android

Event History

Jan 4, 2021

CVE Published

via Android·12:00 AM

Jan 11, 2021

CVE Published

via MITRE·09:48 PM

Data Sourced

via MITRE·09:48 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-0311?

CVE-2021-0311 has a severity rating that indicates it can lead to remote information disclosure.

How do I fix CVE-2021-0311?

To fix CVE-2021-0311, update your Android device to the latest available security patches.

What versions of Android are affected by CVE-2021-0311?

CVE-2021-0311 affects Android versions 8.0, 8.1, 9.0, 10.0, and 11.0.

Is user interaction required for exploiting CVE-2021-0311?

Yes, user interaction is needed for the exploitation of CVE-2021-0311.

What is the type of vulnerability for CVE-2021-0311?

CVE-2021-0311 is classified as an out of bounds write vulnerability.