CVEvulnerability
CVE-2021-0703
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-10-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-416
Description
In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privilege if the attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-184569329
Affected configurations
• google android 11.0
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://source.android.com/security/bulletin/2021-10-01 Patch, Vendor Advisory
- https://source.android.com/security/bulletin/2021-10-01 Patch, Vendor Advisory