CVE-2021-0424 : In memory management driver, there is a possible system crash due to a missing b

In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05393787.

Published 2021-09-27 12:15:08

Updated 2022-06-28 14:11:45

Source Android (associated with Google Inc. or Open Handset Alliance)

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2021-0424

Google » Android » Version: 10.0
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt6580 » Version: N/A
When used together with: Mediatek » Mt6582 90 » Version: N/A
When used together with: Mediatek » Mt6582e » Version: N/A
When used together with: Mediatek » Mt6582h » Version: N/A
When used together with: Mediatek » Mt6582t » Version: N/A
When used together with: Mediatek » Mt6582w » Version: N/A
When used together with: Mediatek » Mt6589 » Version: N/A
When used together with: Mediatek » Mt6589td » Version: N/A
When used together with: Mediatek » Mt6592 90 » Version: N/A
When used together with: Mediatek » Mt6592e » Version: N/A
When used together with: Mediatek » Mt6592h » Version: N/A
When used together with: Mediatek » Mt6592t » Version: N/A
When used together with: Mediatek » Mt6592w » Version: N/A
When used together with: Mediatek » Mt6595 » Version: N/A
When used together with: Mediatek » Mt6731 » Version: N/A
When used together with: Mediatek » Mt6732 » Version: N/A
When used together with: Mediatek » Mt6735 » Version: N/A
When used together with: Mediatek » Mt6737 » Version: N/A
When used together with: Mediatek » Mt6739 » Version: N/A
When used together with: Mediatek » Mt6750 » Version: N/A
When used together with: Mediatek » Mt6750s » Version: N/A
When used together with: Mediatek » Mt6752 » Version: N/A
When used together with: Mediatek » Mt6753 » Version: N/A
When used together with: Mediatek » Mt6755 » Version: N/A
When used together with: Mediatek » Mt6755s » Version: N/A
When used together with: Mediatek » Mt6757 » Version: N/A
When used together with: Mediatek » Mt6757c » Version: N/A
When used together with: Mediatek » Mt6757cd » Version: N/A
When used together with: Mediatek » Mt6757ch » Version: N/A
When used together with: Mediatek » Mt6758 » Version: N/A
When used together with: Mediatek » Mt6761 » Version: N/A
When used together with: Mediatek » Mt6762 » Version: N/A
When used together with: Mediatek » Mt6763 » Version: N/A
When used together with: Mediatek » Mt6765 » Version: N/A
When used together with: Mediatek » Mt6768 » Version: N/A
When used together with: Mediatek » Mt6769 » Version: N/A
When used together with: Mediatek » Mt6771 » Version: N/A
When used together with: Mediatek » Mt6779 » Version: N/A
When used together with: Mediatek » Mt6785 » Version: N/A
When used together with: Mediatek » Mt6795 » Version: N/A
When used together with: Mediatek » Mt6797 » Version: N/A
When used together with: Mediatek » Mt6799 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6853t » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6889 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A
Google » Android » Version: 11.0
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
Matching versions
When used together with: Mediatek » Mt6580 » Version: N/A
When used together with: Mediatek » Mt6582 90 » Version: N/A
When used together with: Mediatek » Mt6582e » Version: N/A
When used together with: Mediatek » Mt6582h » Version: N/A
When used together with: Mediatek » Mt6582t » Version: N/A
When used together with: Mediatek » Mt6582w » Version: N/A
When used together with: Mediatek » Mt6589 » Version: N/A
When used together with: Mediatek » Mt6589td » Version: N/A
When used together with: Mediatek » Mt6592 90 » Version: N/A
When used together with: Mediatek » Mt6592e » Version: N/A
When used together with: Mediatek » Mt6592h » Version: N/A
When used together with: Mediatek » Mt6592t » Version: N/A
When used together with: Mediatek » Mt6592w » Version: N/A
When used together with: Mediatek » Mt6595 » Version: N/A
When used together with: Mediatek » Mt6731 » Version: N/A
When used together with: Mediatek » Mt6732 » Version: N/A
When used together with: Mediatek » Mt6735 » Version: N/A
When used together with: Mediatek » Mt6737 » Version: N/A
When used together with: Mediatek » Mt6739 » Version: N/A
When used together with: Mediatek » Mt6750 » Version: N/A
When used together with: Mediatek » Mt6750s » Version: N/A
When used together with: Mediatek » Mt6752 » Version: N/A
When used together with: Mediatek » Mt6753 » Version: N/A
When used together with: Mediatek » Mt6755 » Version: N/A
When used together with: Mediatek » Mt6755s » Version: N/A
When used together with: Mediatek » Mt6757 » Version: N/A
When used together with: Mediatek » Mt6757c » Version: N/A
When used together with: Mediatek » Mt6757cd » Version: N/A
When used together with: Mediatek » Mt6757ch » Version: N/A
When used together with: Mediatek » Mt6758 » Version: N/A
When used together with: Mediatek » Mt6761 » Version: N/A
When used together with: Mediatek » Mt6762 » Version: N/A
When used together with: Mediatek » Mt6763 » Version: N/A
When used together with: Mediatek » Mt6765 » Version: N/A
When used together with: Mediatek » Mt6768 » Version: N/A
When used together with: Mediatek » Mt6769 » Version: N/A
When used together with: Mediatek » Mt6771 » Version: N/A
When used together with: Mediatek » Mt6779 » Version: N/A
When used together with: Mediatek » Mt6785 » Version: N/A
When used together with: Mediatek » Mt6795 » Version: N/A
When used together with: Mediatek » Mt6797 » Version: N/A
When used together with: Mediatek » Mt6799 » Version: N/A
When used together with: Mediatek » Mt6833 » Version: N/A
When used together with: Mediatek » Mt6853 » Version: N/A
When used together with: Mediatek » Mt6853t » Version: N/A
When used together with: Mediatek » Mt6873 » Version: N/A
When used together with: Mediatek » Mt6875 » Version: N/A
When used together with: Mediatek » Mt6877 » Version: N/A
When used together with: Mediatek » Mt6883 » Version: N/A
When used together with: Mediatek » Mt6885 » Version: N/A
When used together with: Mediatek » Mt6889 » Version: N/A
When used together with: Mediatek » Mt6891 » Version: N/A
When used together with: Mediatek » Mt6893 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-0424

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-0424

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-0424

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-0424

https://corp.mediatek.com/product-security-bulletin/September-2021

September 2021
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-0424

Products affected by CVE-2021-0424

Exploit prediction scoring system (EPSS) score for CVE-2021-0424

CVSS scores for CVE-2021-0424

CWE ids for CVE-2021-0424

References for CVE-2021-0424