Vulnerabilities > CVE-2021-0918 - Out-of-bounds Write vulnerability in Google Android 12.0

047910
CVSS 8.3 - HIGH
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
low complexity
google
CWE-787

Summary

In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197536150

Vulnerable Configurations

Part Description Count
OS
Google
1

Common Weakness Enumeration (CWE)