CVE-2021-0880

CVE-2021-0880 describes an integer overflow vulnerability in the PowerVR kernel driver's PVRSRVBridgeRGXKickTA3D function, affecting Android SoCs. This flaw, stemming from a missing size check, could lead to out-of-bounds heap access, enabling local escalation of privilege without user interaction or additional execution privileges. Rated 7.8 HIGH on CVSS, it poses a significant risk of full compromise (confidentiality, integrity, availability). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.