[a remote root exploit chain to Pwn the latest Pixel Phone]

2021-07-0100:00:00

Google

osv.dev

0.001 Low

EPSS

Percentile

42.1%

JSON

In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/external/chromium-libpaceq11
platform/external/chromium-libpaceq10
platform/external/v8eq9
platform/external/chromium-libpaceq8.1
platform/external/v8eq8.1
platform/external/v8eq11
platform/external/v8eq10
platform/external/chromium-libpaceq9

Name	Operator	Version
platform/external/chromium-libpac	eq	11
platform/external/chromium-libpac	eq	10
platform/external/v8	eq	9
platform/external/chromium-libpac	eq	8.1
platform/external/v8	eq	8.1
platform/external/v8	eq	11
platform/external/v8	eq	10
platform/external/chromium-libpac	eq	9