CVE-2021-0663

—

CVSS 3.1

6.7 medium

EPSS

<1%p45

Published

Oct 25, 2021 (Oct 25, 2021)

Modified

Jun 17, 2026

Description

In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844458; Issue ID: ALPS05844458.

Vendors: google
Products: android
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news3 stories

Multiple Bugs Enable Eavesdropping on 37% of Android Phones

Infosecurity MagazineNov 24, 11:00 UTC · Nov 24, 2021Vulnerability CVE-2021-0661 CVE-2021-0662 CVE-2021-0663+1 CVEs

Eavesdropping bug impacts roughly a third of the world's smartphones

The RecordDec 19, 00:00 UTC · Dec 19, 2022Vulnerability CVE-2021-0661 CVE-2021-0662 CVE-2021-0663+1 CVEs

Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally

The Hacker NewsNov 25, 04:50 UTC · Nov 25, 2021Vulnerability CVE-2021-0661 CVE-2021-0662 CVE-2021-0663+1 CVEs