CVE-2021-0671

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05664273; Issue ID: ALPS05664273.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 18, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-06725.5In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosurCVE-2021-06737.8In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilCVE-2021-06745.5In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure wiCVE-2021-06757.8In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege CVE-2021-06764.4In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosurCVE-2021-06774.4In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with SysteCVE-2021-06786.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystCVE-2021-06796.7In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with SystemCVE-2021-06805.5In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disCVE-2021-06815.5In system properties, there is a possible information disclosure due to a missing permission check. This could lead to local information disCVE-2021-06825.5In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permissioCVE-2021-06837.8In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could le