CVE-2021-0437
Severity CVSS v4.0:
Pending analysis
Type:
CWE-415
Double Free
Publication date:
13/04/2021
Last modified:
16/04/2021
Description
In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176168330
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Base Score 2.0
4.60
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:* | ||
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:* | ||
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:* | ||
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page