CVE-2021-39752: High severity android vulnerability

Published Mar 30, 2022

Updated

In Bubbles, there is a possible way to interfere with Bubbles due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202756848

Affected Software

1 affected component

Google Android=12.1

Event History

Mar 30, 2022

CVE Published

via MITRE·04:02 PM

Data Sourced

via MITRE·04:02 PM

DescriptionWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker needs local access and low privileges. No user interaction or additional execution privileges are required.

What is the likely impact if exploitation succeeds?

Successful exploitation can allow local escalation of privilege through interference with Bubbles. Confidentiality, integrity, and availability impacts are all rated High in the supplied CVSS vector.

Which Android release is identified as affected?

The provided data identifies Android 12L as affected.

CVE-2021-39752: High severity android vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?

Which Android release is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?

Which Android release is identified as affected?