CVE-2021-0633

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05585423; Issue ID: ALPS05585423.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Oct 25, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-06346.7In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with SyCVE-2021-06357.8When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, andCVE-2021-06367.8When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, andCVE-2021-06395.5In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to the way sensitive datCVE-2021-06407.8In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalaCVE-2021-06415.5In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing peCVE-2021-06425.5In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missiCVE-2021-06435.5In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissiCVE-2021-06445.5In conditionallyRemoveIdentifiers of SubscriptionController.java, there is a possible way to retrieve a trackable identifier due to a missinCVE-2021-06457.8In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of priviCVE-2021-06467.8In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This could lead to local escCVE-2021-06497.8In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of pri
CVE-2021-0633: Medium severity, CVSS 6.7 | Vulnix