CVE-2021-0465
Last modified
CVE-2021-0465 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. EPSS estimates a 0.12% chance of exploitation in the next 30 days.
Description
In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-172005755
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-0465?
How severe is CVE-2021-0465?
How do I fix CVE-2021-0465?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-0459In fts_driver_test_write of fts_proc.c, there is a possible …4.4
- CVE-2021-0460In the FingerTipS touch screen driver, there is a possible o…4.4
- CVE-2021-0461In iaxxx_core_sensor_change_state of iaxxx-module.c, there i…6.7
- CVE-2021-0462In the NXP NFC firmware, there is a possible insecure firmwa…6.7
- CVE-2021-0463In convertToHidl of convert.cpp, there is a possible out of …5.5
- CVE-2021-0464In sound_trigger_event_alloc of platform.h, there is a possi…7.8
- CVE-2021-0466In startIpClient of ClientModeImpl.java, there is a possible…7.5
- CVE-2021-0467In Chromecast bootROM, there is a possible out of bounds wri…6.8
- CVE-2021-0468In LK, there is a possible escalation of privilege due to an…6.6
- CVE-2021-0471In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out …5.5
- CVE-2021-0472In shouldLockKeyguard of LockTaskController.java, there is a…7.8
- CVE-2021-0473In rw_t3t_process_error of rw_t3t.cc, there is a possible do…8.8
Are you affected by CVE-2021-0465?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
