Vulnerabilities > CVE-2021-0308 - Out-of-bounds Write vulnerability in multiple products

047910
CVSS 6.8 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
google
debian
CWE-787
NVD
Published: 2021-01-11
Updated: 2024-11-21

Summary

In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158063095.

Vulnerable Configurations

Part Description Count
OS
Google
5
OS
Debian
1

Common Weakness Enumeration (CWE)

References