CVE-2021-1894 — Improper Handling of Exceptional Conditions in Google Android

CWE-755 — Improper Handling of Exceptional Conditions3 documents3 sources

Severity

7.8HIGHNVD

EPSS

0.0%

top 90.05%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Android

Timeline

PublishedJan 3

Latest updateJan 4

Description

Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶googlegoogle/android

🔴Vulnerability Details

GHSA

GHSA-xp4j-8vqv-q337: Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon↗2022-01-04

▶

📋Vendor Advisories

Android

CVE-2021-1894: Closed-source component↗2021-12-01

▶