CVE-2021-0925: High severity Google Android vulnerability

Published Nov 1, 2021

Updated

In rwt4tsmdetectndef of rwt4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure due to a limited change in behavior based on the out of bounds data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-191444150

Affected Software

2 affected components

Google Android=12.0

Google Android

Event History

Nov 1, 2021

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Dec 15, 2021

CVE Published

via MITRE·06:05 PM

Data Sourced

via MITRE·06:05 PM

DescriptionWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The issue is remotely exploitable over the network with low attack complexity. It requires no privileges and no user interaction.

What is the expected security impact?

Successful exploitation can disclose information through a limited behavioral change based on out-of-bounds data. The provided CVSS vector indicates no integrity or availability impact.

Which Android version is identified as affected?

The provided data identifies Android 12 as affected.

CVE-2021-0925: High severity Google Android vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact?

Which Android version is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact?

Which Android version is identified as affected?