CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
5.1%
In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a
possible out of bounds write due to a missing bounds check. This could lead
to local information disclosure with no additional execution privileges
needed. User interaction is not needed for exploitation.Product:
AndroidVersions: Android-11Android ID: A-174302683
android.googlesource.com/platform/external/flac/+/368eb3f5bec249a197c95a95583ff8153aa6a87f
github.com/xiph/flac/commit/e1575e4a7c5157cbf4e4a16dbd39b74f7174c7be (1.3.4)
launchpad.net/bugs/cve/CVE-2021-0561
nvd.nist.gov/vuln/detail/CVE-2021-0561
security-tracker.debian.org/tracker/CVE-2021-0561
source.android.com/security/bulletin/pixel/2021-06-01
ubuntu.com/security/notices/USN-5733-1
www.cve.org/CVERecord?id=CVE-2021-0561
xiph.org/flac/changelog.html#flac_1.3.4
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
5.1%