NetSight
medium6.0

CVE-2021-25490

A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process.

Impact

A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 9.0, 10.0, 11.0

Weakness classification

References