VDB
CVE-2021-0674
CVE-2021-0674
PUBLISHED
CVSS 5.5 MEDIUM
In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237.
EPSS 0.51% · 42.6th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.51%
42.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 | Android 8.1, 9.0, 10.0, 11.0 |
| android | 8.1, 9.0, 10.0 |
Timeline
- Dec 17, 2021 CVE Published
- Dec 20, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 13, 2022 EPSS Score
- Jun 2, 2022 EPSS Score
- Jul 27, 2022 EPSS Score
- Sep 20, 2022 EPSS Score
- Nov 13, 2022 EPSS Score
- Jan 7, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 26, 2023 EPSS Score
- Jun 19, 2023 EPSS Score