Heap Buffer Overflow in MediaTek's Ape Extractor
CVE-2021-0618

5.5MEDIUM

Key Information:

Vendor

Google
Status
Mt6739, Mt6758, Mt6761, Mt6762, Mt6763, Mt6765, Mt6768, Mt6769, Mt6771, Mt6779, Mt6785, Mt6795, Mt6797, Mt6799, Mt6833, Mt6853, Mt6853t, Mt6873, Mt6875, Mt6877, Mt6883, Mt6885, Mt6889, Mt6891, Mt6893, Mt8163, Mt8167, Mt8167s, Mt8168, Mt8173, Mt8175, Mt8183, Mt8185, Mt8195, Mt8321, Mt8362a, Mt8365, Mt8385, Mt8765, Mt8766, Mt8768, Mt8786, Mt8788, Mt8789, Mt8791, Mt8797
Vendor
CVE Published:
25 October 2021

What is CVE-2021-0618?

A vulnerability exists within MediaTek's Ape Extractor that allows for a potential out of bounds read due to a heap buffer overflow. This flaw enables local information disclosure without requiring any additional execution privileges. Notably, the exploitation of this vulnerability does not necessitate user interaction, making it a valuable target for attackers. A patch has been released to address this issue, ensuring systems can be protected against potential exploitation.

Affected Version(s)

MT6739, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Android 10.0, 11.0

References

https://corp.mediatek.com/product-security-bulletin/Octob...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.