deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-33824
Published: 2021-06-18
Description: An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021-33824.md; https://github.com/shekyan/slowhttptest; https://www.moxa.com/en/products/industrial-edge-connectivity/protocol-gateways/modbus-tcp-gateways/mgate-mb3180-mb3280-mb3480-series
CVE: CVE-2021-21257
Published: 2021-06-18
Description: Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do not validate the address pointer in the RPL source routing header This makes it possible for an attacker to cause out-of-bounds writes with packets injected into the network stack. Specifically, the problem lies in the rpl_ext_header_srh_update function in the two rpl-ext-header.c modules for RPL-Classic and RPL-Lite respectively. The addr_ptr variable is calculated using an unvalidated CMPR field value from the source routing header. An out-of-bounds write can be triggered on line 151 in os/net/routing/rpl-lite/rpl-ext-header.c and line 261 in os/net/routing/rpl-classic/rpl-ext-header.c, which contain the following memcpy call with addr_ptr as destination. The problem has been patched in Contiki-NG 4.6. Users can apply a patch out-of-band as a workaround.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://github.com/contiki-ng/contiki-ng/pull/1431; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-mvc7-9p4q-c5cm; https://github.com/contiki-ng/contiki-ng/pull/1431
CVE: CVE-2021-21279
Published: 2021-06-18
Description: Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In verions prior to 4.6, an attacker can perform a denial-of-service attack by triggering an infinite loop in the processing of IPv6 neighbor solicitation (NS) messages. This type of attack can effectively shut down the operation of the system because of the cooperative scheduling used for the main parts of Contiki-NG and its communication stack. The problem has been patched in Contiki-NG 4.6. Users can apply the patch for this vulnerability out-of-band as a workaround.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-rr5j-j8m8-fc4f; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-rr5j-j8m8-fc4f
CVE: CVE-2021-21280
Published: 2021-06-18
Description: Contiki-NG is an open-source, cross-platform operating system for internet of things devices. It is possible to cause an out-of-bounds write in versions of Contiki-NG prior to 4.6 when transmitting a 6LoWPAN packet with a chain of extension headers. Unfortunately, the written header is not checked to be within the available space, thereby making it possible to write outside the buffer. The problem has been patched in Contiki-NG 4.6. Users can apply the patch for this vulnerability out-of-band as a workaround.
CVSS Score: 8.6 (HIGH)
CWE: CWE-787
References: https://github.com/contiki-ng/contiki-ng/pull/1409; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-r768-hrhf-v592; https://github.com/contiki-ng/contiki-ng/pull/1409
CVE: CVE-2021-21281
Published: 2021-06-18
Description: Contiki-NG is an open-source, cross-platform operating system for internet of things devices. A buffer overflow vulnerability exists in Contiki-NG versions prior to 4.6. After establishing a TCP socket using the tcp-socket library, it is possible for the remote end to send a packet with a data offset that is unvalidated. The problem has been patched in Contiki-NG 4.6. Users can apply the patch for this vulnerability out-of-band as a workaround.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120
References: https://github.com/contiki-ng/contiki-ng/pull/1366; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-mc42-fqfr-h9fp; https://github.com/contiki-ng/contiki-ng/pull/1366
CVE: CVE-2021-21410
Published: 2021-06-18
Description: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and prior. The IPv6 header decompression function (<code>uncompress_hdr_iphc</code>) does not perform proper boundary checks when reading from the packet buffer. Hence, it is possible to construct a compressed 6LoWPAN packet that will read more bytes than what is available from the packet buffer. As of time of publication, there is not a release with a patch available. Users can apply the patch for this vulnerability out-of-band as a workaround.
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://github.com/contiki-ng/contiki-ng/pull/1482; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-hhwj-2p59-v8p9; https://github.com/contiki-ng/contiki-ng/pull/1482
CVE: CVE-2021-31272
Published: 2021-06-18
Description: SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution or privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/SerenityOS/serenity/issues/3991; https://github.com/SerenityOS/serenity/issues/3992; https://github.com/SerenityOS/serenity/pull/5713
CVE: CVE-2021-31660
Published: 2021-06-18
Description: RIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow which could allow attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/RIOT-OS/RIOT/commit/85da504d2dc30188b89f44c3276fc5a25b31251f; https://github.com/RIOT-OS/RIOT/pull/15947; https://github.com/RIOT-OS/RIOT/commit/85da504d2dc30188b89f44c3276fc5a25b31251f
CVE: CVE-2021-31661
Published: 2021-06-18
Description: RIOT-OS 2021.01 before commit 609c9ada34da5546cffb632a98b7ba157c112658 contains a buffer overflow that could allow attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/RIOT-OS/RIOT/commit/609c9ada34da5546cffb632a98b7ba157c112658; https://github.com/RIOT-OS/RIOT/pull/15945; https://github.com/RIOT-OS/RIOT/commit/609c9ada34da5546cffb632a98b7ba157c112658
CVE: CVE-2021-31662
Published: 2021-06-18
Description: RIOT-OS 2021.01 before commit 07f1254d[PII_REDACTED]e7dce80364aaead9266bbe contains a buffer overflow which could allow attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/RIOT-OS/RIOT/commit/07f1254d[PII_REDACTED]e7dce80364aaead9266bbe; https://github.com/RIOT-OS/RIOT/pull/15930; https://github.com/RIOT-OS/RIOT/commit/07f1254d[PII_REDACTED]e7dce80364aaead9266bbe
CVE: CVE-2021-31663
Published: 2021-06-18
Description: RIOT-OS 2021.01 before commit bc59d60be60dfc0a05def57d74985371e4f22d79 contains a buffer overflow which could allow attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/RIOT-OS/RIOT/commit/bc59d60be60dfc0a05def57d74985371e4f22d79; https://github.com/RIOT-OS/RIOT/issues/15927; https://github.com/RIOT-OS/RIOT/pull/15929
CVE: CVE-2021-31664
Published: 2021-06-18
Description: RIOT-OS 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a contains a buffer overflow which could allow attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/RIOT-OS/RIOT/commit/44741ff99f7a71df45420635b238b9c22093647a; https://github.com/RIOT-OS/RIOT/pull/15345; https://github.com/RIOT-OS/RIOT/commit/44741ff99f7a71df45420635b238b9c22093647a
CVE: CVE-2021-33185
Published: 2021-06-18
Description: SerenityOS contains a buffer overflow in the set_range test in TestBitmap which could allow attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/SerenityOS/serenity/issues/7073; https://github.com/SerenityOS/serenity/issues/7073
CVE: CVE-2021-33186
Published: 2021-06-18
Description: SerenityOS in test-crypto.cpp contains a stack buffer overflow which could allow attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/SerenityOS/serenity/issues/7072; https://github.com/SerenityOS/serenity/issues/7072
CVE: CVE-2021-24368
Published: 2021-06-20
Description: The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its result_id parameter when displaying an existing quiz result page, leading to a reflected Cross-Site Scripting issue. This could allow for privilege escalation by inducing a logged in admin to open a malicious link
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7f2fda5b-45a5-4fc6-968f-90bc9674c999; https://wpscan.com/vulnerability/7f2fda5b-45a5-4fc6-968f-90bc9674c999
CVE: CVE-2020-20466
Published: 2021-06-21
Description: White Shark System (WSS) 1.3.2 is vulnerable to unauthorized access via user_edit_password.php, remote attackers can modify the password of any user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://github.com/itodaro/WhiteSharkSystem_cve; https://github.com/itodaro/WhiteSharkSystem_cve
CVE: CVE-2020-20467
Published: 2021-06-21
Description: White Shark System (WSS) 1.3.2 is vulnerable to sensitive information disclosure via default_task_add.php, remote attackers can exploit the vulnerability to create a task.
CVSS Score: 6.5 (MEDIUM)
References: https://cwe.mitre.org/data/definitions/472.html; https://github.com/itodaro/WhiteSharkSystem_cve; https://cwe.mitre.org/data/definitions/472.html
CVE: CVE-2020-20468
Published: 2021-06-21
Description: White Shark System (WSS) 1.3.2 is vulnerable to CSRF. Attackers can use the user_edit_password.php file to modify the user password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/itodaro/WhiteSharkSystem_cve; https://github.com/itodaro/WhiteSharkSystem_cve
CVE: CVE-2020-20469
Published: 2021-06-21
Description: White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files failing to filter the csa_to_user parameter, remote attackers can exploit the vulnerability to obtain database sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/itodaro/WhiteSharkSystem_cve; https://github.com/itodaro/WhiteSharkSystem_cve
CVE: CVE-2020-20470
Published: 2021-06-21
Description: White Shark System (WSS) 1.3.2 has web site physical path leakage vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://cwe.mitre.org/data/definitions/209.html; https://github.com/itodaro/WhiteSharkSystem_cve; https://cwe.mitre.org/data/definitions/209.html
CVE: CVE-2020-20471
Published: 2021-06-21
Description: White Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php, remote attackers can exploit this vulnerability to escalate to admin privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://github.com/itodaro/WhiteSharkSystem_cve; https://github.com/itodaro/WhiteSharkSystem_cve
CVE: CVE-2020-20472
Published: 2021-06-21
Description: White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The if_get_addbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://github.com/itodaro/WhiteSharkSystem_cve; https://github.com/itodaro/WhiteSharkSystem_cve
CVE: CVE-2020-20473
Published: 2021-06-21
Description: White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/itodaro/WhiteSharkSystem_cve; https://github.com/itodaro/WhiteSharkSystem_cve
CVE: CVE-2020-20474
Published: 2021-06-21
Description: White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituser.php files failing to filter the csa_to_user parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/itodaro/WhiteSharkSystem_cve; https://github.com/itodaro/WhiteSharkSystem_cve
CVE: CVE-2021-31769
Published: 2021-06-21
Description: MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\MyQ\PHP\Sessions directory. The "Select server file" feature is only intended for administrators but actually does not require authorization. An attacker can inject arbitrary OS commands (such as commands to create new .php files) via the Task Scheduler component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://gist.github.com/bc0d3/6d55866a78f[PII_REDACTED]1406e18794f; https://gist.github.com/bc0d3/6d55866a78f[PII_REDACTED]1406e18794f
CVE: CVE-2021-29337
Published: 2021-06-21
Description: MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate privileges via a crafted IOCTL 0x9c406104 call. This IOCTL provides the MmMapIoSpace feature for mapping physical memory.
CVSS Score: 7.8 (HIGH)
References: https://github.com/rjt-gupta/CVE-2021-29337; https://github.com/rjt-gupta/CVE-2021-29337
CVE: CVE-2021-33572
Published: 2021-06-21
Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine.
CVSS Score: 3.5 (LOW)
CWE: CWE-476, CWE-476
References: https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame; https://www.f-secure.com/en/business/support-and-downloads/security-advisories; https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame
CVE: CVE-2019-7002
Published: 2021-06-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-7031
Published: 2021-06-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2021-28684
Published: 2021-06-21
Description: The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-611
References: https://peterka.tech/blog/posts/cve-2021-28684/; https://www.powerarchiver.com; https://peterka.tech/blog/posts/cve-2021-28684/
CVE: CVE-2021-28833
Published: 2021-06-21
Description: Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/increments/qiita-markdown/releases; https://vuln.ryotak.me/advisories/50; https://github.com/increments/qiita-markdown/releases
CVE: CVE-2006-0016
Published: 2021-06-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2006-0017
Published: 2021-06-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2006-0740
Published: 2021-06-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2006-0849
Published: 2021-06-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2006-1053
Published: 2021-06-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2007-1857
Published: 2021-06-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-25016
Published: 2021-06-21
Description: Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://github.com/greenbone/gsa/pull/318; https://github.com/greenbone/gsa/releases/tag/v7.0.3; https://github.com/greenbone/gsa/pull/318
CVE: CVE-2019-25047
Published: 2021-06-21
Description: Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/greenbone/gsa/blob/master/CHANGELOG.md#802---2020-05-13; https://github.com/greenbone/gsa/issues/1601; https://github.com/greenbone/gsa/pull/1603
CVE: CVE-2020-21517
Published: 2021-06-21
Description: Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://metinfo.com; https://github.com/lvyyevd/cms/blob/master/metinfo/metinfo7.0.0.md; https://u.mituo.cn/api/metinfo/download/7.0.0
CVE: CVE-2020-22390
Published: 2021-06-21
Description: Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://cqinfo.la/csv-injection-in-akaunting/; https://cqinfo.la/csv-injection-in-akaunting/
CVE: CVE-2020-21130
Published: 2021-06-21
Description: Cross Site Scripting (XSS) vulnerability in HisiPHP 2.0.8 via the group name in addgroup.html.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/hisiphp/hisiphp/issues/7; https://github.com/hisiphp/hisiphp/issues/7
CVE: CVE-2021-20248
Published: 2021-06-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2021-20249
Published: 2021-06-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-29059
Published: 2021-06-21
Description: A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/sindresorhus/is-svg/releases/tag/v4.3.0; https://github.com/yetingli/PoCs/blob/main/CVE-2021-29059/IS-SVG.md; https://github.com/yetingli/SaveResults/blob/main/js/is-svg.js
CVE: CVE-2021-29060
Published: 2021-06-21
Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://github.com/Qix-/color-string/commit/0789e21284c33d89ebc4ab4ca6f759b9375ac9d3; https://github.com/yetingli/PoCs/blob/main/CVE-2021-29060/Color-String.md; https://github.com/yetingli/SaveResults/blob/main/js/color-string.js
CVE: CVE-2021-0478
Published: 2021-06-21
Description: In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-169255797
CVSS Score: 7.8 (HIGH)
CWE: CWE-755
References: https://source.android.com/security/bulletin/2021-06-01; https://source.android.com/security/bulletin/2021-06-01
CVE: CVE-2021-0504
Published: 2021-06-21
Description: In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179162665
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2021-06-01; https://source.android.com/security/bulletin/2021-06-01
CVE: CVE-2021-0505
Published: 2021-06-21
Description: In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179975048
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2021-06-01; https://source.android.com/security/bulletin/2021-06-01
CVE: CVE-2021-0506
Published: 2021-06-21
Description: In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-181962311
CVSS Score: 7.3 (HIGH)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/2021-06-01; https://source.android.com/security/bulletin/2021-06-01
CVE: CVE-2021-0507
Published: 2021-06-21
Description: In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181860042
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2021-06-01; https://source.android.com/security/bulletin/2021-06-01
CVE: CVE-2021-0508
Published: 2021-06-21
Description: In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176444154
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/2021-06-01; https://source.android.com/security/bulletin/2021-06-01
CVE: CVE-2021-0509
Published: 2021-06-21
Description: In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444161
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/2021-06-01; https://source.android.com/security/bulletin/2021-06-01