Skip to content
OpenAdvisories
Unscored CVE-2021-0622 EUVD-2021-3241GHSA-2gq7-3778-xcfp

In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure wit…

Published Nov 18, 2021 · Updated Aug 3, 2024 · Assigned by google_android

Description

In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561388.

Affected products

VendorProductAffectedFixed
— MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, Android 10.0, 11.0 —

References