CVE-2021-0639

MEDIUM

Android - Insecure Storage of Sensitive Information in libl3oemcrypto.cpp

Title source: llm
STIX 2.1

Description

In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to the way sensitive data is handled. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-190724551

References (1)

Core 1
Core References

Scores

CVSS v3 5.5
EPSS 0.0012
EPSS Percentile 2.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-922
Status published
Products (1)
google/android
Published Aug 17, 2021
Tracked Since Feb 18, 2026