CVE-2021-0635
published 2021-10-06CVE-2021-0635: When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found…
PriorityP434high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.31%
23.5th percentile
When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:Android-10Android ID: A-189402477
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2021-0635: Video
vendor_android·2021-09-01·CVSS 7.8
CVE-2021-0635 [HIGH] CVE-2021-0635: Video
Android Security Bulletin 2021-09-01
CVE: CVE-2021-0635
Severity: HIGH
Component: Video
References: A-189402477
U-1595212
*
GHSA
GHSA-rr84-xgw4-q7v3: When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log i
ghsa_unreviewed·2022-05-24
CVE-2021-0635 [HIGH] GHSA-rr84-xgw4-q7v3: When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log i
When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:Android-10Android ID: A-189402477
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-10-06
Published