What is CVE-2021-0636?

CVE-2021-0636 is a high-severity vulnerability in Google Android. CVSS score: 7.8/10. Published 2021-10-06.

How severe is CVE-2021-0636?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Google Android

CVE-2021-0636

When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion: Android-10Android ID: A-189392423

EPSS: 0.003 (22.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Google Android — versions 10.0
N/a Android — versions Android SoC

References

security@android.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-0636?: CVE-2021-0636 is a high-severity vulnerability in Google Android. CVSS score: 7.8/10. Published 2021-10-06.
How severe is CVE-2021-0636?: High severity. CVSS v3 base score is 7.8 out of 10.