Out-of-bounds write in Google products - CVE-2021-0661
Published: November 25, 2021 / Updated: December 8, 2021
Vulnerability identifier: #VU58360
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-0661
CWE-ID: CWE-787
Exploitation vector: Local access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a local user to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input in audio DSP. A local administrator can trigger out-of-bounds write and execute arbitrary code on the target system with elevated privileges.
Affected software
MT6781
MT8797
MT6893
MT6891
MT6889
MT6885
MT6883
MT6877
MT6875
MT6873
MT6853T
MT6853
MT6785
MT6779
Google Android
MT8797
MT6893
MT6891
MT6889
MT6885
MT6883
MT6877
MT6875
MT6873
MT6853T
MT6853
MT6785
MT6779
Google Android
How to mitigate CVE-2021-0661
Install updates from vendor's website.