CVE-2021-39740: Input Validation
In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-209965112
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs local access and low-level privileges on an affected Android 12L device. No user interaction or additional execution privileges are required.
What is the likely impact?
Successful exploitation can bypass attachment restrictions in Messaging and disclose local information. The vulnerability does not affect integrity or availability according to the supplied CVSS vector.
Which versions are identified as affected?
The provided data identifies Android 12L. No other Android versions are listed.