VDB

CVE-2021-0592

CVE-2021-0592 PUBLISHED CVSS 8.800000190734863 HIGH

In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-188061006

EPSS 1.06% · 63.2th percentile

Risk Scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
1.06%
63.2th percentile

Affected Products

VendorProductVersions
n/aAndroidAndroid SoC
googleandroid

Timeline

  • Jul 14, 2021 CVE Published
  • Jul 15, 2021 EPSS Score
  • Jul 17, 2021 EPSS Score
  • Nov 12, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 12, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Jul 10, 2022 EPSS Score
  • Sep 9, 2022 EPSS Score
  • Jan 7, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›