CVE-2021-39815 - The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it

CVE-2021-39815

Summary

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232440670

References

https://source.android.com/security/bulletin/2022-08-01

Vulnerable Configurations

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-416

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

29-08-2022 - 01:03

Published

24-08-2022 - 14:15

Last modified

29-08-2022 - 01:03