CVE-2021-0308 PUBLISHED

In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158063095.

EPSS 0.08% · 23.3th percentile

Risk Scores

EPSS Score
0.08%
23.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSgdisk0, 1.0.1-1build1, 1.0.1-1
Ubuntu:20.04:LTSgdisk1.0.4-3, 1.0.5-1, 0
Ubuntu:14.04:LTSgdisk0.8.7-1, 0, 0.8.8-1ubuntu0.1
Ubuntu:22.04:LTSgdisk1.0.8-4build1, 1.0.8-1, 1.0.8-3
Ubuntu:18.04:LTSgdisk1.0.3-1, 1.0.1-1build1, 0

Timeline

References

Open in Interactive Console →