CVE-2021-30342 — Time-of-check Time-of-use (TOCTOU) Race Condition in Google Android

CWE-367 — Time-of-check Time-of-use (TOCTOU) Race Condition4 documents4 sources

Severity

5.9MEDIUMNVD

EPSS

0.1%

top 66.03%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Android

Timeline

PublishedJun 14

Latest updateJun 15

Description

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages1 packages

▶googlegoogle/android

🔴Vulnerability Details

GHSA

GHSA-22fm-2rjp-5f34: Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto,↗2022-06-15

▶

💥Exploits & PoCs

Nuclei

Gradio < 2.5.0 - Arbitrary File Read

▶

📋Vendor Advisories

Android

CVE-2021-30342: Closed-source component↗2022-04-01

▶