CVE-2021-0675

—

CVSS 3.1

7.8 high

EPSS

<1%p44

Published

Dec 15, 2021 (Dec 15, 2021)

Modified

Jun 17, 2026

Description

In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064258.

Vendors: google
Products: android
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news2 stories

Critical Chipset Bugs Open Millions of Android Devices to Remote Spying

The Hacker NewsApr 22, 03:36 UTC · Apr 22, 2022Exploit / PoC CVE-2021-0674 CVE-2021-0675 CVE-2021-30351

Critical bug in popular chipsets exposes 2/3 of Android devices to hack

Security AffairsApr 21, 20:17 UTC · Apr 21, 2022Exploit / PoC CVE-2021-0674 CVE-2021-0675 CVE-2021-30351