Out-of-bounds write in Google Android - CVE-2021-0308

Vulnerability identifier: #VU49882

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-0308

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local authenticated user to execute arbitrary code.

In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158063095.

Google Android
Arch Linux
Gentoo Linux
Oracle Linux
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Ubuntu
gptfdisk (Alpine package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
gdisk (Red Hat package)
gdisk (Ubuntu package)
OpenShift Virtualization

Install update from vendor's website.

gptfdisk (Alpine package) - update to 1.0.6-r0
gdisk (Red Hat package) - addressed in versions 1.0.3-9.el8_6.1, 1.0.3-11.el8
gdisk (Ubuntu package) - update to 1.0.11ubuntu0.1~esm2
OpenShift Virtualization - addressed in versions 4.11.1, 4.12.0

• https://source.android.com/security/bulletin/2021-01-01

• Out-of-bounds write in Google, Google Android
• Out-of-bounds write in gptfdisk (Alpine package)
• Arch Linux update for gptfdisk
• Gentoo update for GPT fdisk
• Ubuntu update for gdisk
• Red Hat Enterprise Linux 8 update for gdisk
• Multiple vulnerabilities in OpenShift Virtualization 4.11
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 8.6 Extended Update Support update for gdisk