Google Android 12.0 jit_memory_region.cc privileges management

A vulnerability was found in Google Android 12.0 (Smartphone Operating System). It has been classified as critical. Affected is an unknown function of the file jit_memory_region.cc. Applying a patch is able to eliminate this problem.

Field01/15/2022 08:05 AM01/19/2022 01:47 PM
cvss3_vuldb_acLL
cvss3_vuldb_prLL
cvss3_vuldb_uiNN
cvss3_vuldb_sUU
cvss3_vuldb_cLL
cvss3_vuldb_iLL
cvss3_vuldb_aLL
cvss3_vuldb_rlOO
cvss3_vuldb_rcCC
cvss3_nvd_avLL
cvss3_nvd_acLL
cvss3_nvd_prLL
cvss3_nvd_uiNN
cvss3_nvd_sUU
cvss3_nvd_cHH
cvss3_nvd_iHH
cvss3_nvd_aHH
cvss2_nvd_avLL
cvss2_nvd_acLL
cvss2_nvd_auNN
cvss2_nvd_ciCC
cvss2_nvd_iiCC
cvss2_nvd_aiCC
identifierA-200284993A-200284993
urlhttps://source.android.com/security/bulletin/2022-01-01https://source.android.com/security/bulletin/2022-01-01
namePatchPatch
cveCVE-2021-0959CVE-2021-0959
cve_assigned16046172001604617200
date1642201200 (01/15/2022)1642201200 (01/15/2022)
typeSmartphone Operating SystemSmartphone Operating System
cvss2_vuldb_avLL
cvss2_vuldb_acLL
cvss2_vuldb_ciPP
cvss2_vuldb_iiPP
cvss2_vuldb_aiPP
cvss2_vuldb_rcCC
cvss2_vuldb_rlOFOF
cvss2_vuldb_auNN
cvss2_vuldb_eNDND
cvss3_vuldb_eXX
cvss2_nvd_basescore7.27.2
cvss3_nvd_basescore7.87.8
cvss2_vuldb_basescore4.64.6
cvss2_vuldb_tempscore4.04.0
cvss3_vuldb_basescore5.35.3
cvss3_vuldb_tempscore5.15.1
cvss3_meta_basescore6.56.5
cvss3_meta_tempscore6.46.4
price_0day$25k-$100k$25k-$100k
price_trend++
vendorGoogleGoogle
nameAndroidAndroid
version12.012.0
filejit_memory_region.ccjit_memory_region.cc
cwe269 (privilege escalation)269 (privilege escalation)
risk22
cvss3_vuldb_avLL
cve_nvd_summaryIn jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-200284993

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!