CVE-2021-25468

Medium

4.4/10

Summary

A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows attackers to read arbitrary memory address.

Attack Complexity: LOW
Attack Vector: LOCAL
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: HIGH
Confidentiality Impact: HIGH
Availability Impact: NONE

References

Advisory Timeline

Published Oct 06, 2021

CVE-2021-25468

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS