VULNERABILITY INTELLIGENCE

CVE-2021-39815

CVSS score9.8 CRITICAL
EPSS probability0.41%
CISA KEVNot currently listed
Published2022-08-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232440670

Weakness classification

  • nvd@nist.gov: CWE-416

Primary references