CVE-2021-0592

In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-188061006
Configurations

Configuration 1 (hide)

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:42

Type Values Removed Values Added
References () https://source.android.com/security/bulletin/2021-07-01 - Vendor Advisory () https://source.android.com/security/bulletin/2021-07-01 - Vendor Advisory

16 Jul 2021, 19:54

Type Values Removed Values Added
References (MISC) https://source.android.com/security/bulletin/2021-07-01 - (MISC) https://source.android.com/security/bulletin/2021-07-01 - Vendor Advisory
CWE CWE-787
CVSS v2 : unknown
v3 : unknown
v2 : 9.3
v3 : 8.8
CPE cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

14 Jul 2021, 14:20

Type Values Removed Values Added
New CVE

Information

Published : 2021-07-14 14:15

Updated : 2024-11-21 05:42


NVD link : CVE-2021-0592

Mitre link : CVE-2021-0592

CVE.ORG link : CVE-2021-0592


JSON object : View

Products Affected

google

  • android
CWE
CWE-787

Out-of-bounds Write