CVE-2021-0467
Last modified
CVE-2021-0467 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. EPSS estimates a 0.13% chance of exploitation in the next 30 days.
Description
In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-174490700
Metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | All versions |
References
- https://source.android.com/security/bulletin/2021-05-01Vendor Advisory
- https://source.android.com/security/bulletin/2021-05-01Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-0467?
How severe is CVE-2021-0467?
How do I fix CVE-2021-0467?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-0461In iaxxx_core_sensor_change_state of iaxxx-module.c, there i…6.7
- CVE-2021-0462In the NXP NFC firmware, there is a possible insecure firmwa…6.7
- CVE-2021-0463In convertToHidl of convert.cpp, there is a possible out of …5.5
- CVE-2021-0464In sound_trigger_event_alloc of platform.h, there is a possi…7.8
- CVE-2021-0465In GenerateFaceMask of face.cc, there is a possible out of b…7.8
- CVE-2021-0466In startIpClient of ClientModeImpl.java, there is a possible…7.5
- CVE-2021-0468In LK, there is a possible escalation of privilege due to an…6.6
- CVE-2021-0471In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out …5.5
- CVE-2021-0472In shouldLockKeyguard of LockTaskController.java, there is a…7.8
- CVE-2021-0473In rw_t3t_process_error of rw_t3t.cc, there is a possible do…8.8
- CVE-2021-0474In avrc_msg_cback of avrc_api.cc, there is a possible out of…9.8
- CVE-2021-0475In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possibl…8.8
Are you affected by CVE-2021-0467?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
