Exploitation Summary
EIP tracks 2 public exploits for CVE-2021-0437. PoCs published by nanopathi.
AI-analyzed exploit summary This repository contains source code files from the Android Open Source Project (AOSP) related to the camera framework, specifically focusing on CVE-2021-0437. The code includes implementations of camera functionality but does not contain an explicit exploit or proof-of-concept. It appears to be a snapshot of vulnerable code for analysis purposes.
Description
In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176168330
Exploits (2)
This repository contains source code files from the Android Open Source Project (AOSP) related to the camera framework, specifically focusing on CVE-2021-0437. The code includes implementations of camera functionality but does not contain an explicit exploit or proof-of-concept. It appears to be a snapshot of vulnerable code for analysis purposes.
This repository contains source code files from the Android Open Source Project (AOSP) related to the camera framework, specifically focusing on CVE-2021-0437. The files include implementations of camera functionality but do not contain an explicit exploit or proof-of-concept code.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H