{"id":"CVE-2021-39793","kind":"vulnerability","aliases":["CVE-2021-39793"],"related":[],"title":"Google Pixel: Google Pixel Out-of-Bounds Write Vulnerability","description":"In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N/A","summary":"Google Pixel phones contain an out-of-bounds write caused by a logic error. A local app or user with some access can use it to gain higher privileges on the device.","severity":"high","cvss":7.8,"epss":0.00685,"exploited":true,"exploited_at":"2022-04-11T00:00:00+00:00","products":[{"name":"Google Pixel","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["android","exploited","infrastructure","mobile","pixel"],"not_affected_if":["non-pixel-devices"],"how_to_check":null,"fix":"Apply the Google Pixel security update per vendor instructions, as CISA requires.","status":"open","published_at":"2022-03-16T15:15:12+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:18:03+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:18:03Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Google Pixel security update per vendor instructions, as CISA requires.","reach":"local","impact":"high","summary":"Google Pixel phones contain an out-of-bounds write caused by a logic error. A local app or user with some access can use it to gain higher privileges on the device.","category":"infrastructure","who_cares":["pixel","android","mobile"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker escalates privileges on the phone from a local foothold","analyst_note":"Confirm the patched Pixel security bulletin month and affected builds from Google's Android security bulletin; the sources give no versions.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["non-pixel-devices"],"user_interaction":"unknown","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.000433,"input_tokens":2817,"output_tokens":302,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2021':12A,15A '-39793':13A,16A '210470189references':111C 'a-210470189references':109C 'access':46B 'addit':94C 'android':19B,106C 'androidvers':105C 'app':41B 'bound':8A,32B,74C 'buf':61C 'caus':34B 'code':83C 'contain':27B 'could':85C 'cve':11A,14A 'devic':56B 'due':76C 'error':38B,80C 'escal':89C 'execut':95C 'exploit':20B 'exploitation.product':104C 'gain':51B 'googl':1A,3A,24B 'google':17A 'higher':52B 'id':108C 'infrastructur':21B 'interact':99C 'jd':59C 'kbase':58C,66C 'kernelandroid':107C 'lead':86C 'local':40B,88C 'logic':37B,79C 'mali':65C 'mem.c':67C 'mobil':22B 'n/a':112C 'need':97C,102C 'out-of-bound':5A,29B 'page':63C 'phone':26B 'pin':62C 'pixel':2A,4A,18A,23B,25B 'possibl':71C 'privileg':53B,91C,96C 'use':48B 'user':43B,60C,98C 'vulner':10A 'write':9A,33B,75C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2022-03-16T15:15:12+00:00","kev":{"dateAdded":"2022-04-11","dueDate":"2022-05-02","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2021-39793","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-39793","severity":null,"published_at":"2022-04-11T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:06+00:00","note":null},{"source":"epss","external_id":"CVE-2021-39793","url":"https://api.first.org/data/v1/epss?cve=CVE-2021-39793","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2021-39793","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-39793","severity":null,"published_at":"2022-03-16T15:15:12+00:00","modified_at":"2026-06-17T04:04:10+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}