CoreCVE
Back

HIGH

In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free

Published Jan 11, 2021

Description

In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-8.1, Android-10, Android-11; Android ID: A-168211968.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-416

Use After Free

CWE-787

Out-of-bounds Write

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner google_android
Published Jan 11, 2021
Updated Aug 3, 2024
Reserved Nov 6, 2020
Link CVE-2021-0318
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2021-0318
Red Hat
Severity n/a
Public date n/a
Links CVE-2021-0318