CVE-2021-0948

MEDIUM

Android - Information Disclosure via PVRSRVBridgeGetMultiCoreInfo ioctl

Title source: llm
STIX 2.1

Description

The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information.

References (1)

Core 1

Scores

CVSS v3 5.5
EPSS 0.0009
EPSS Percentile 0.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-908
Status published
Products (1)
google/android
Published Jul 13, 2023
Tracked Since Feb 18, 2026