high7.8Known exploited
CVE-2021-39793
Google Pixel Out-of-Bounds Write Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-04-11. Federal due date: 2022-05-02.
Apply updates per vendor instructions.
Impact
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N/A
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | All versions |