Summary

Security CVES
High CVE-2021-0636,CVE-2021-0635

Minutia

CVE ID CVE-2021-0636
Title memory corruption when extracting malformed avi file
Description

Do not check the array size cause Memory Corruption
Technology Area Kernel
Vulnerability Type CWE-119 Memory Corruption - Generic
Access Vector Local
CVSS Rating High
CVSS Score 7.1
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:F/RC:C
Affected Chipsets*

SC9863A/SC9832E/SC7731E/UMS512/UMS312/UMS9230/UMS9620

CVE ID CVE-2021-0635
Title Memory corruption when extracting malformed flv file
Description

Video driver do not check the array size cause Memory Corruption
Technology Area Kernel
Vulnerability Type CWE-119 Memory Corruption - Generic
Access Vector Local
CVSS Rating High
CVSS Score 7.1
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:F/RC:C
Affected Chipsets*

SC9863A/SC9832E/SC7731E/UMS512/UMS312/UMS9230/UMS9620

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

Vulnerability type definition

Abbreviation Interpretation
RCE Remote Code Execution
EoP Elevation of Privilege
ID Information Disclosure
DoS Denial of Service
N/A Classification not available

Version

Version Date Description
1.0 2021-09-01