Google · Pixel
CVE-2021-39793
Google Pixel Out-of-Bounds Write Vulnerability
What it is
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N/A
CISA: Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 2, 2022
- Added to the CISA list
- April 11, 2022
- Published
- March 16, 2022
- Severity
- High 7.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 0.7% in the top 47.6% of all known vulnerabilities
- Weakness
- CWE-787
- More details
- NVD · CVE.org · CISA
All references (1)
More exploited flaws from Google
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 16, 2026 | Improper Authorization | Pixel | High 8.8 | 0.6% |
| Oct 27, 2026 | Unchecked Return Value | Brotli | Critical 9.2 | 55% |
| Sep 9, 2026 | Out of Bounds Write | Chromium V8 | High 8.8 | 3.5% |
| Sep 4, 2026 | Type Confusion | Chromium V8 | High 8.8 | 1.8% |
| Jun 9, 2026 | Out-of-Bounds Read and Write | Chromium V8 | High 8.8 | 2.4% |
| Apr 1, 2026 | Use-After-Free | Dawn | High 8.8 | 14% |
| Mar 13, 2026 | Out-of-Bounds Write | Skia | High 8.8 | 2.3% |
| Mar 13, 2026 | Improper Restriction of Operations Within the Bounds of a Memory Buffer | Chromium V8 | High 8.8 | 2.7% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.