CVE-2021-0415

In memory management driver, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336692.

• CWE-862

• https://corp.mediatek.com/product-security-bulletin/August-2021Third Party Advisory
• https://corp.mediatek.com/product-security-bulletin/August-2021Third Party Advisory

Published

Aug 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0409In flv extractor, there is a possible out of bounds read due…5.5
• CVE-2021-0410In flv extractor, there is a possible out of bounds read due…5.5
• CVE-2021-0411In flv extractor, there is a possible out of bounds read due…5.5
• CVE-2021-0412In flv extractor, there is a possible out of bounds read due…5.5
• CVE-2021-0413In flv extractor, there is a possible out of bounds read due…5.5
• CVE-2021-0414In flv extractor, there is a possible out of bounds read due…5.5
• CVE-2021-0416In memory management driver, there is a possible system cras…5.5
• CVE-2021-0417In memory management driver, there is a possible system cras…5.5
• CVE-2021-0418In memory management driver, there is a possible system cras…5.5
• CVE-2021-0419In memory management driver, there is a possible system cras…5.5
• CVE-2021-0420In memory management driver, there is a possible system cras…5.5
• CVE-2021-0421In memory management driver, there is a possible information…5.5