CVE-2021-1022
published 2021-12-15CVE-2021-1022: In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote…
PriorityP339high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.75%
50.8th percentile
In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-180420059
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| platform | system_bt | >= 12:0 < 12:2021-12-01 | 12:2021-12-01 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5pfp-wg82-hvp6: In btif_in_hf_client_generic_evt of btif_hf_client
ghsa_unreviewed·2021-12-16
CVE-2021-1022 [HIGH] CWE-476 GHSA-5pfp-wg82-hvp6: In btif_in_hf_client_generic_evt of btif_hf_client
In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-180420059
OSV
CVE-2021-1022: In btif_in_hf_client_generic_evt of btif_hf_client
osv·2021-12-01
CVE-2021-1022 CVE-2021-1022: In btif_in_hf_client_generic_evt of btif_hf_client
In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Red Hat
kernel: media: zr364xx: fix memory leak in zr364xx_start_readpipe
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2021-47344 [MEDIUM] CWE-401 kernel: media: zr364xx: fix memory leak in zr364xx_start_readpipe
kernel: media: zr364xx: fix memory leak in zr364xx_start_readpipe
In the Linux kernel, the following vulnerability has been resolved:
media: zr364xx: fix memory leak in zr364xx_start_readpipe
syzbot reported memory leak in zr364xx driver.
The problem was in non-freed urb in case of
usb_submit_urb() fail.
backtrace:
[] kmalloc include/linux/slab.h:561 [inline]
[] usb_alloc_urb+0x66/0xe0 drivers/usb/core/urb.c:74
[] zr364xx_start_readpipe+0x78/0x130 drivers/media/usb/zr364xx/zr364xx.c:1022
[] zr364xx_board_init drivers/media/usb/zr364xx/zr364xx.c:1383 [inline]
[] zr364xx_probe+0x6a3/0x851 drivers/media/usb/zr364xx/zr364xx.c:1516
[] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396
[] really_probe+0x159/0x500 drivers/base/dd.c:576
Package: kernel (Red Hat Enterprise Linux 6) - O
No detection rules found.
No writeups or analysis indexed.
2021-12-15
Published