CVE-2021-39749: High severity android vulnerability
In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-205996115
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs local access and low-privileged access on an affected Android device. No user interaction or additional execution privileges are required.
What security impact can exploitation have?
Successful exploitation can allow a local attacker to start non-exported, protected activities and escalate privileges. The reported impact includes high confidentiality, integrity, and availability impact.
How can I determine whether a device is affected?
The affected product and version listed are Google Android 12L. The issue is tracked by Android ID A-205996115.