CVE-2021-0397

In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free

published March 10, 2021

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

🚨 A sneaky double free in Android could pave the way for remote code execution without needing user interaction! 🔥 Think of this vulnerability like a restaurant that mistakenly gives you the same meal twice. Instead of taking one plate back to the kitchen, they accidentally let both stay on the table, leaving you with an unexpected extra dish that could be tampered with. 🍽️ If exploited, this could lead to an attacker executing any code on your device, potentially gaining unauthorized control and access to sensitive information. The damage could be extensive, affecting the very heart of your device's operation and security!

Put simply

Think of this vulnerability like a restaurant that mistakenly gives you the same meal twice. Instead of taking one plate back to the kitchen, they accidentally let both stay on the table, leaving you with an unexpected extra dish that could be tampered with. 🍽️ This vulnerability, found in the sdp_copy_raw_data function, allows a double free scenario where memory that has already been released can be accessed again, leading to potential remote code execution without needing any special permissions.

What to do

If exploited, this could lead to an attacker executing any code on your device, potentially gaining unauthorized control and access to sensitive information. The damage could be extensive, affecting the very heart of your device's operation and security! To mitigate this vulnerability, ensure your device is updated to the latest Android version available. Always keep an eye on security patches released by your device manufacturer and apply them promptly. 🛡️ You can handle this! Stay vigilant and keep your device updated, and you’ll be a security hero in no time! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05670 · 93.0th percentile
Published
2021-03-10T15:40Z
EPSS history
Timeline
  • 10 MAR 15:40Z
    In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free
    cvelistv5