CVE-2021-0945

EPSS 0.3%CWE-787

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 jun 2023Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Productos afectados

n/a · Android

Referencias

https://source.android.com/security/bulletin/2023-06-01