Out-of-bounds write in Google products - CVE-2021-0673
Published: November 25, 2021 / Updated: March 7, 2023
Vulnerability identifier: #VU58366
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-0673
CWE-ID: CWE-787
Exploitation vector: Local access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a local user to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input in AudioManager API. A local administrator can trigger out-of-bounds write and execute arbitrary code on the target system with elevated privileges.
Affected software
MT6781
MT8797
MT6893
MT6891
MT6889
MT6885
MT6883
MT6877
MT6875
MT6873
MT6853T
MT6853
MT6785
MT6779
Google Android
MT8797
MT6893
MT6891
MT6889
MT6885
MT6883
MT6877
MT6875
MT6873
MT6853T
MT6853
MT6785
MT6779
Google Android
How to mitigate CVE-2021-0673
Install update from vendor's website.