CVE-2021-0548 — Vulnetix

Try Vulnetix Request Demo

CVE-2021-0548 PUBLISHED CVSS 7.800000190734863 HIGH

In rw_i93_send_to_lower of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157650357

EPSS 0.02% · 3.0th percentile

Risk Scores

CVSS v3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.02%

3.0th percentile

Affected Products

Vendor	Product	Versions
google	android	11.0
n/a	Android	Android-11

Timeline

Jun 8, 2021 CVE Published
Jun 23, 2021 EPSS Score
Aug 22, 2021 EPSS Score
Oct 21, 2021 EPSS Score
Dec 19, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 17, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Apr 18, 2022 EPSS Score
Jun 17, 2022 EPSS Score
Aug 17, 2022 EPSS Score
Oct 15, 2022 EPSS Score

References

https://source.android.com/security/bulletin/pixel/2021-06-01 advisory
https://source.android.com/security/bulletin/2021-06-01 advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-0548 advisory

Open in Interactive Console →