VDB
CVE-2021-0594
CVE-2021-0594
PUBLISHED
In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if the user can also inject a printf into a privileged process's SQL with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-153352319
EPSS 1.40% · 71.3th percentile
Risk Scores
EPSS Score
1.40%
71.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Android | Android-9 Android-10 Android-11 Android-8.1 |
Timeline
- Jul 14, 2021 CVE Published
- Jul 15, 2021 EPSS Score
- Jul 17, 2021 EPSS Score
- Sep 13, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Jan 11, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 12, 2022 EPSS Score
- Apr 19, 2022 EPSS Score
- May 12, 2022 EPSS Score
- Jul 11, 2022 EPSS Score
- Sep 10, 2022 EPSS Score
References
- https://cert-portal.siemens.com/productcert/html/ssa-792319.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-832273.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-225840.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-353002.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-653855.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-382651.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-145196.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-918992.html advisory
- https://source.android.com/security/bulletin/2021-08-01 url
- https://cert-portal.siemens.com/productcert/html/ssa-576771.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-366067.html advisory
- https://cert-portal.siemens.com/productcert/html/ssa-770721.html advisory