CVE-2021-0628 | Vulnetix

CVE-2021-0628 PUBLISHED CVSS 6.699999809265137 MEDIUM

In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722454; Issue ID: ALPS05722454.

EPSS 0.12% · 1.9th percentile

Risk Scores

CVSS 3.1

6.699999809265137

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.12%

1.9th percentile

Affected Products

Vendor	Product	Versions
n/a	MT6580, MT6735, MT6739, MT6755S, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885	Android 10.0, 11.0
google	android	10.0, 11.0

Timeline

Aug 18, 2021 CVE Published
Aug 19, 2021 EPSS Score
Oct 16, 2021 EPSS Score
Dec 14, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 10, 2022 EPSS Score
Apr 10, 2022 EPSS Score
Jun 7, 2022 EPSS Score
Aug 6, 2022 EPSS Score
Oct 3, 2022 EPSS Score
Dec 1, 2022 EPSS Score
Jan 28, 2023 EPSS Score

References

Open in Interactive Console →