VulnerabilitycriticalExploited in the wild

Arm and Qualcomm zero-days quietly patched in this month's Android security updates

The RecordDec 21, 2022 · 00:00 UTC (Dec 21, 2022)2 min read2 · 1 read

Read at therecord.media

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-1905 CVE-2021-1906 CVE-2021-28663 CVE-2021-28664 CVE-2020-11261 CVE-2019-2215

Tags: cve-2021-1905 cve-2021-1906 cve-2021-28663 cve-2021-28664 cve-2020-11261 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-2215	Use-After-Free Privilege Escalation in Android Kernel (CVE-2019-2215)	7.8	72%	KEVPoC ×2	Oct 11, 2019 KEV Nov 3, 2021
CVE-2020-11261	Local Privilege Escalation via Memory Corruption in Qualcomm Snapdragon Chipsets	7.8	2%	KEV	Jun 9, 2021 KEV Dec 1, 2021
CVE-2021-1905 +1 related CVE CVE-2021-1906	Use-After-Free in Qualcomm Snapdragon Chipsets Allows Local Privilege Escalation	7.8 group max	2%	KEV	May 7, 2021 KEV Nov 3, 2021
CVE-2021-28663 +1 related CVE CVE-2021-28664	Use-After-Free Privilege Escalation in Arm Mali GPU Kernel Driver	8.8	12%	KEVPoC	May 10, 2021 KEV Nov 3, 2021

From the original article

2 min read at therecord.media

Google has updated today the May 2021 Android security bulletin to reveal that four of the bugs patched earlier this month "may be under limited, targeted exploitation." The OS maker has not provided any details about the attacks besides listing the CVE identifiers of the four vulnerabilities.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.