CVE-2021-0562 — Out-of-bounds Read in Google Android

CWE-125 — Out-of-bounds Read4 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 96.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Platform Frameworks AVGoogle Android
Timeline
PublishedJun 22
Latest updateMay 24

Description

In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-176084648

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5google/androidAndroid-11
▶NVDgoogle/android11.0
▶Androidplatform/frameworks_av11:0 — 11:2021-06-01

🔴Vulnerability Details

3
GHSA
GHSA-q7gc-mpfg-847w: In RasterIntraUpdate of motion_est↗2022-05-24
▶
CVEList
CVE-2021-0562: In RasterIntraUpdate of motion_est↗2021-06-22
▶
OSV
CVE-2021-0562: In RasterIntraUpdate of motion_est↗2021-06-01
▶
CVE-2021-0562 — Out-of-bounds Read in Google Android | cvebase