CVE-2021-39750: High severity android vulnerability
Published Mar 30, 2022
·Updated
In PackageManager, there is a possible way to change the splash screen theme of other apps due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-206474016
Affected Software
1 affected component
Google Android=12.1
Event History
Mar 30, 2022
CVE Published
via MITRE·04:02 PM
Data Sourced
via MITRE·04:02 PM
DescriptionWeakness
Frequently Asked Questions
1
Which systems are in scope for this issue?
The issue affects Google Android devices running Android 12L.
2
What level of attacker access is required?
Exploitation requires local access and low privileges. It does not require user interaction or additional execution privileges.
3
What is the potential impact if exploitation succeeds?
An attacker may be able to change the splash screen theme of other applications, resulting in local privilege escalation with high confidentiality, integrity, and availability impact according to the CVSS vector.