Vulnerability Database

318,273

Total vulnerabilities in the database

CVE-2021-0674

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237.

  • Published: Dec 17, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-0674
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
google / android 8.1 8.1.x
google / android 9.0 9.0.x
google / android 10.0 10.0.x
google / android 11.0 11.0.x