CVE-2021-0436: Integer Overflow
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496160
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-0436?
CVE-2021-0436 is classified as a moderate severity vulnerability due to its potential for local information disclosure.
How do I fix CVE-2021-0436?
To fix CVE-2021-0436, update to the latest version of Android that includes security patches addressing this vulnerability.
What versions of Android are affected by CVE-2021-0436?
CVE-2021-0436 affects Android versions 8.1, 9.0, 10.0, and 11.0.
Can CVE-2021-0436 be exploited without user interaction?
Yes, CVE-2021-0436 can be exploited without any user interaction required.
What kind of exposure does CVE-2021-0436 allow?
CVE-2021-0436 allows for local information disclosure due to out of bounds read from an integer overflow.