7.2

CVE-2021-0904

In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06076938; Issue ID: ALPS06076938.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Android Version 8.1
   Mediatek ≫ Mt6771 Version -
   Mediatek ≫ Mt8183 Version -
   Mediatek ≫ Mt8385 Version -
   Mediatek ≫ Mt8788 Version -
Google ≫ Android Version 9.0
   Mediatek ≫ Mt6771 Version -
   Mediatek ≫ Mt8183 Version -
   Mediatek ≫ Mt8385 Version -
   Mediatek ≫ Mt8788 Version -
Google ≫ Android Version 10.0
   Mediatek ≫ Mt6771 Version -
   Mediatek ≫ Mt8183 Version -
   Mediatek ≫ Mt8385 Version -
   Mediatek ≫ Mt8788 Version -
Google ≫ Android Version 11.0
   Mediatek ≫ Mt6771 Version -
   Mediatek ≫ Mt8183 Version -
   Mediatek ≫ Mt8385 Version -
   Mediatek ≫ Mt8788 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.032
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

https://corp.mediatek.com/product-security-bulletin/December-2021
Third Party Advisory