CVE-2021-0697

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-238918403

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362 CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Sep 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-06985.5In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local infor CVE-2021-06997.8In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege CVE-2021-07019.8In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could all CVE-2021-07025.5In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This cou CVE-2021-07036.8In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of CVE-2021-07045.5In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accoun CVE-2021-07057.8In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permission CVE-2021-07065.5In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. CVE-2021-07077.8In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privi CVE-2021-07087.8In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead t CVE-2021-07345.5In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information dis CVE-2021-07355.5In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to