CVE-2021-39659: Medium severity Google Android vulnerability

Published Jan 4, 2022

Updated

In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-208267659

Affected Software

4 affected components

Google Android=10.0

Google Android=11.0

Google Android=12.0

Google Android

Event History

Jan 4, 2022

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Jan 14, 2022

CVE Published

via MITRE·07:11 PM

Data Sourced

via MITRE·07:11 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2021-39659?

CVE-2021-39659 is a vulnerability in the sortSimPhoneAccountsForEmergency function of CreateConnectionProcessor.java in Google Android that could lead to a local denial of service and requires user execution privileges.

How severe is CVE-2021-39659?

CVE-2021-39659 has a severity rating of 5.5 (high).

Which software is affected by CVE-2021-39659?

The affected software is Google Android versions 10.0, 11.0, and 12.0.

How can I fix CVE-2021-39659?

To fix CVE-2021-39659, update your Google Android device to the latest version available.

Where can I find more information about CVE-2021-39659?

You can find more information about CVE-2021-39659 at the following references: [link1], [link2], [link3].