CVE-2021-0510: Integer Overflow

Published Jun 7, 2021

Updated

In decrypt12 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444622

Affected Software

5 affected components

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android=11.0

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2021-06-01

Event History

Jun 7, 2021

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Jun 21, 2021

CVE Published

via MITRE·04:01 PM

Data Sourced

via MITRE·04:01 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-0510?

CVE-2021-0510 has a medium severity rating due to its potential to allow local escalation of privilege.

How do I fix CVE-2021-0510?

To mitigate CVE-2021-0510, users should update their Android devices to the latest security patch provided by Google.

What versions of Android are affected by CVE-2021-0510?

CVE-2021-0510 affects Android versions 8.1, 9.0, 10.0, and 11.0.

Is user interaction required to exploit CVE-2021-0510?

No, user interaction is not needed for exploitation of CVE-2021-0510.

What type of vulnerability is CVE-2021-0510?

CVE-2021-0510 is an out of bounds write vulnerability caused by an integer overflow.