Security Advisory

CVE-2021-0303

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-11 21:48:20

Last updated 2024-08-03 15:32:10

Assigner google_android

State PUBLISHED

Description

In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Android ID: A-170407229.

← Browse all CVEs View on cve.org ↗