CVE-2021-0355

MEDIUM

Android 11 - Integer Overflow to Out-of-Bounds Write in kisd

Title source: llm

Description

In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425581.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://corp.mediatek.com/product-security-acknowledgements

Scores

CVSS v3 6.7

EPSS 0.0015

EPSS Percentile 4.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-190

Status published

Products (1)

google/android 11.0

Published Feb 03, 2021

Tracked Since Feb 18, 2026