Heap Buffer Overflow Vulnerability in MediaTek Ape Extractor
CVE-2021-0616

5.5MEDIUM

Key Information:

Vendor

Google
Status
Mt5522, Mt5527, Mt5597, Mt5598, Mt5599, Mt6739, Mt6758, Mt6761, Mt6762, Mt6763, Mt6765, Mt6768, Mt6769, Mt6771, Mt6779, Mt6785, Mt6795, Mt6797, Mt6799, Mt6833, Mt6853, Mt6853t, Mt6873, Mt6875, Mt6877, Mt6883, Mt6885, Mt6889, Mt6891, Mt6893, Mt8163, Mt8167, Mt8167s, Mt8168, Mt8173, Mt8175, Mt8183, Mt8185, Mt8195, Mt8321, Mt8362a, Mt8365, Mt8385, Mt8765, Mt8766, Mt8768, Mt8786, Mt8788, Mt8789, Mt8791, Mt8797, Mt9256, Mt9285, Mt9286, Mt9288, Mt9629, Mt9631, Mt9632, Mt9636, Mt9638, Mt9639, Mt9650, Mt9652, Mt9669, Mt9670, Mt9675, Mt9685, Mt9686, Mt9688, Mt9931, Mt9950, Mt9970, Mt9980, Mt9981
Vendor
CVE Published:
25 October 2021

What is CVE-2021-0616?

A vulnerability in the MediaTek Ape Extractor has been identified, which allows for a possible out of bounds read due to a heap buffer overflow. This issue may lead to local information disclosure without requiring any additional execution privileges or user interaction. Affected users should review the patch provided in the security bulletin for mitigation.

Affected Version(s)

MT5522, MT5527, MT5597, MT5598, MT5599, MT6739, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT9256, MT9285, MT9286, MT9288, MT9629, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688, MT9931, MT9950, MT9970, MT9980, MT9981 Android 10.0, 11.0

References

https://corp.mediatek.com/product-security-bulletin/Octob...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.