CVE-2021-0655

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05673424; Issue ID: ALPS05673424.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 18, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-06566.7In edma driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System CVE-2021-06576.7In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege wiCVE-2021-06586.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystCVE-2021-06594.4In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SysCVE-2021-06604.9In ccu, there is a possible out of bounds read due to incorrect error handling. This could lead to information disclosure with System executCVE-2021-06616.7In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege witCVE-2021-06626.7In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege witCVE-2021-06636.7In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege witCVE-2021-06646.7In ccu, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System executioCVE-2021-06654.4In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SysCVE-2021-06664.4In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SysCVE-2021-06676.7In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execu
CVE-2021-0655: Medium severity, CVSS 6.7 | Vulnix