CVE-2021-39685: High severity android vulnerability
In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210292376References: Upstream kernel
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-39685?
CVE-2021-39685 has a critical severity level due to its potential for local escalation of privileges.
How do I fix CVE-2021-39685?
To fix CVE-2021-39685, upgrade to the latest kernel versions or patches that address this vulnerability.
Which versions of Android are affected by CVE-2021-39685?
CVE-2021-39685 affects various versions of Android, particularly those prior to the security updates that address this issue.
Is user interaction required to exploit CVE-2021-39685?
No, user interaction is not needed to exploit CVE-2021-39685, making it more dangerous.
What type of vulnerability is CVE-2021-39685?
CVE-2021-39685 is an out-of-bounds write vulnerability in the USB gadget subsystem.