CVE-2021-39675: Buffer Overflow
In GKIgetbuf of gkibuffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/system/nfcto a version that resolves this vulnerability.Fixed in 12:2022-02-01
Event History
Frequently Asked Questions
What is the severity of CVE-2021-39675?
CVE-2021-39675 has been classified as a high severity vulnerability due to its potential for remote escalation of privileges.
How do I fix CVE-2021-39675?
To mitigate CVE-2021-39675, it is recommended to update affected devices to the latest version of Android that includes security patches.
What products are affected by CVE-2021-39675?
CVE-2021-39675 specifically affects Android 12 devices.
What type of vulnerability is CVE-2021-39675?
CVE-2021-39675 is categorized as a heap buffer overflow vulnerability.
Is user interaction required to exploit CVE-2021-39675?
No, user interaction is not needed for the exploitation of CVE-2021-39675.