CVE-2021-0629 | Vulnetix

CVE-2021-0629 PUBLISHED CVSS 6.699999809265137 MEDIUM

In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05776625; Issue ID: ALPS05776625.

EPSS 0.12% · 2.4th percentile

Risk Scores

CVSS 3.1

6.699999809265137

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.12%

2.4th percentile

Affected Products

Vendor	Product	Versions
n/a	MT6873, MT6875, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791, MT8797, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9686, MT9970, MT9980, MT9981	Android 10.0, 11.0
google	android	10.0, 11.0

Timeline

Nov 18, 2021 CVE Published
Nov 19, 2021 EPSS Score
Jan 13, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Mar 10, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Jun 28, 2022 EPSS Score
Aug 24, 2022 EPSS Score
Oct 18, 2022 EPSS Score
Dec 12, 2022 EPSS Score
Feb 6, 2023 EPSS Score
Mar 7, 2023 EPSS Score

References

Open in Interactive Console →