CVE-2021-0346

In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580.

• CWE-787

• https://corp.mediatek.com/product-security-acknowledgementsThird Party Advisory
• https://corp.mediatek.com/product-security-acknowledgementsThird Party Advisory

Published

Feb 4, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0340In parseNextBox of IsoInterface.java, there is a possible le…8.8
• CVE-2021-0341In verifyHostName of OkHostnameVerifier.java, there is a pos…7.5
• CVE-2021-0342In tun_get_user of tun.c, there is possible memory corruptio…6.7
• CVE-2021-0343In kisd, there is a possible out of bounds write due to a mi…6.7
• CVE-2021-0344In mtkpower, there is a possible memory corruption due to a …6.7
• CVE-2021-0345In mobile_log_d, there is a possible escalation of privilege…6.7
• CVE-2021-0347In ccu, there is a possible out of bounds read due to a miss…4.4
• CVE-2021-0348In vpu, there is a possible out of bounds write due to a mis…6.7
• CVE-2021-0349In display driver, there is a possible memory corruption due…6.7
• CVE-2021-0350In ged, there is a possible system crash due to an improper …4.4
• CVE-2021-0351In wlan driver, there is a possible system crash due to a mi…7.5
• CVE-2021-0352In RT regmap driver, there is a possible memory corruption d…4.4