What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2021-0629.

What is the severity of CVE-2021-0629?

The severity of CVE-2021-0629 is high.

How does CVE-2021-0629 impact the affected software?

CVE-2021-0629 can lead to local escalation of privilege with System execution privileges, and user interaction is not needed for exploitation.

Is there a patch available for CVE-2021-0629?

Yes, a patch with patch ID ALPS05776625 is available for CVE-2021-0629.

Where can I find more information about CVE-2021-0629?

You can find more information about CVE-2021-0629 at the following reference link: [https://corp.mediatek.com/product-security-bulletin/November-2021](https://corp.mediatek.com/product-security-bulletin/November-2021)

Vulnerability/
CVE-2021-0629

high

7.2

CWE

416

18/11/2021

3/8/2024

CVE-2021-0629: Use After Free

First published: Thu Nov 18 2021(Updated: )

In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05776625; Issue ID: ALPS05776625.

Credit: security@android.com

Affected Software	Affected Version	How to fix
Google Android	=10.0
Google Android	=11.0
Mediatek Mt6873
Mediatek Mt6875
Mediatek Mt6883
Mediatek Mt6885
Mediatek Mt6889
Mediatek Mt6891
Mediatek Mt6893
Mediatek Mt8195
Mediatek Mt8791
Mediatek Mt8797
Mediatek Mt9636
Mediatek Mt9638
Mediatek Mt9639
Mediatek Mt9650
Mediatek Mt9652
Mediatek Mt9669
Mediatek Mt9686
Mediatek Mt9970
Mediatek Mt9980
Mediatek Mt9981

Never miss a vulnerability like this again

Reference Links

https://corp.mediatek.com/product-security-bulletin/November-2021

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2021-0629.
What is the severity of CVE-2021-0629?
The severity of CVE-2021-0629 is high.
How does CVE-2021-0629 impact the affected software?
CVE-2021-0629 can lead to local escalation of privilege with System execution privileges, and user interaction is not needed for exploitation.
Is there a patch available for CVE-2021-0629?
Yes, a patch with patch ID ALPS05776625 is available for CVE-2021-0629.
Where can I find more information about CVE-2021-0629?
You can find more information about CVE-2021-0629 at the following reference link: [https://corp.mediatek.com/product-security-bulletin/November-2021](https://corp.mediatek.com/product-security-bulletin/November-2021)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.