NetSight
IP …
medium4.1

CVE-2021-25476

An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE.

Impact

An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 10.0, 11.0

Weakness classification

CWE-1295

References