CVE-2021-0675
Summary
| CVE | CVE-2021-0675 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-12-15 19:15:00 UTC |
| Updated | 2022-04-01 19:13:00 UTC |
| Description | In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064258. |
Risk And Classification
Problem Types: CWE-787
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Android | All | All | All | All | |
| Operating System | Android | 10.0 | All | All | All | |
| Operating System | Android | 11.0 | All | All | All | |
| Operating System | Android | 8.1 | All | All | All | |
| Operating System | Android | 9.0 | All | All | All | |
| Hardware | Mediatek | Mt6570 | - | All | All | All |
| Hardware | Mediatek | Mt6580 | - | All | All | All |
| Hardware | Mediatek | Mt6735 | - | All | All | All |
| Hardware | Mediatek | Mt6737 | - | All | All | All |
| Hardware | Mediatek | Mt6739 | - | All | All | All |
| Hardware | Mediatek | Mt6750 | - | All | All | All |
| Hardware | Mediatek | Mt6750s | - | All | All | All |
| Hardware | Mediatek | Mt6753 | - | All | All | All |
| Hardware | Mediatek | Mt6755 | - | All | All | All |
| Hardware | Mediatek | Mt6755s | - | All | All | All |
| Hardware | Mediatek | Mt6757 | - | All | All | All |
| Hardware | Mediatek | Mt6757c | - | All | All | All |
| Hardware | Mediatek | Mt6757cd | - | All | All | All |
| Hardware | Mediatek | Mt6757ch | - | All | All | All |
| Hardware | Mediatek | Mt6758 | - | All | All | All |
| Hardware | Mediatek | Mt6761 | - | All | All | All |
| Hardware | Mediatek | Mt6763 | - | All | All | All |
| Hardware | Mediatek | Mt6765 | - | All | All | All |
| Hardware | Mediatek | Mt6768 | - | All | All | All |
| Hardware | Mediatek | Mt6771 | - | All | All | All |
| Hardware | Mediatek | Mt6779 | - | All | All | All |
| Hardware | Mediatek | Mt6781 | - | All | All | All |
| Hardware | Mediatek | Mt6785 | - | All | All | All |
| Hardware | Mediatek | Mt6797 | - | All | All | All |
| Hardware | Mediatek | Mt6799 | - | All | All | All |
| Hardware | Mediatek | Mt6833 | - | All | All | All |
| Hardware | Mediatek | Mt6853 | - | All | All | All |
| Hardware | Mediatek | Mt6853t | - | All | All | All |
| Hardware | Mediatek | Mt6873 | - | All | All | All |
| Hardware | Mediatek | Mt6877 | - | All | All | All |
| Hardware | Mediatek | Mt6883 | - | All | All | All |
| Hardware | Mediatek | Mt6885 | - | All | All | All |
| Hardware | Mediatek | Mt6889 | - | All | All | All |
| Hardware | Mediatek | Mt6893 | - | All | All | All |
| Hardware | Mediatek | Mt8163 | - | All | All | All |
| Hardware | Mediatek | Mt8167 | - | All | All | All |
| Hardware | Mediatek | Mt8167s | - | All | All | All |
| Hardware | Mediatek | Mt8168 | - | All | All | All |
| Hardware | Mediatek | Mt8173 | - | All | All | All |
| Hardware | Mediatek | Mt8175 | - | All | All | All |
| Hardware | Mediatek | Mt8176 | - | All | All | All |
| Hardware | Mediatek | Mt8183 | - | All | All | All |
| Hardware | Mediatek | Mt8185 | - | All | All | All |
| Hardware | Mediatek | Mt8195 | - | All | All | All |
| Hardware | Mediatek | Mt8321 | - | All | All | All |
| Hardware | Mediatek | Mt8362a | - | All | All | All |
| Hardware | Mediatek | Mt8365 | - | All | All | All |
| Hardware | Mediatek | Mt8385 | - | All | All | All |
| Hardware | Mediatek | Mt8765 | - | All | All | All |
| Hardware | Mediatek | Mt8766 | - | All | All | All |
| Hardware | Mediatek | Mt8768 | - | All | All | All |
| Hardware | Mediatek | Mt8786 | - | All | All | All |
| Hardware | Mediatek | Mt8788 | - | All | All | All |
| Hardware | Mediatek | Mt8789 | - | All | All | All |
| Hardware | Mediatek | Mt8791 | - | All | All | All |
| Hardware | Mediatek | Mt8797 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Android Security Bulletin—December 2021 | Android Open Source Project | MISC | source.android.com | |
| December 2021 | MISC | corp.mediatek.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 610386 Google Android Devices December 2021 Security Patch Missing