CVE-2021-39623: Critical severity Google Android vulnerability

Published Jan 4, 2022

Updated

In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194105348

Affected Software

5 affected components

Google Android=9.0

Google Android=10.0

Google Android=11.0

Google Android=12.0

Google Android

Event History

Jan 4, 2022

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Jan 14, 2022

CVE Published

via MITRE·07:10 PM

Data Sourced

via MITRE·07:10 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-39623?

CVE-2021-39623 is classified as a high-severity vulnerability due to its potential for remote escalation of privilege.

How do I fix CVE-2021-39623?

To fix CVE-2021-39623, ensure that your device is updated to the latest version of the Android operating system.

Which versions of Android are affected by CVE-2021-39623?

CVE-2021-39623 affects Android versions 9.0, 10.0, 11.0, and 12.0.

What type of vulnerability is CVE-2021-39623?

CVE-2021-39623 is an out of bounds write vulnerability that can lead to potential privilege escalation.

Is user interaction required to exploit CVE-2021-39623?

No, user interaction is not needed for the exploitation of CVE-2021-39623.