QwikSec

Security Database

CVE

CWE

Training

CVE-2021-0308

Published: Jan 11, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158063095.

Vendor	Product	Versions
n/a	Android	affected `Android-8.1` affected `Android-9` affected `Android-10` affected `Android-11` affected `Android-8.0`

References

https://source.android.com/security/bulletin/2021-01-01

x_refsource_CONFIRM

[debian-lts-announce] 20210208 [SECURITY] [DLA 2549-1] gdisk security update

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.