CVE-2021-39753: Medium severity android vulnerability
In DomainVerificationService, there is a possible way to access app domain verification information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-200035185
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs local access and low-level privileges on the affected Android device. No user interaction or additional execution privileges are required.
What information could be exposed?
The issue may allow access to application domain-verification information through DomainVerificationService. The provided data describes the impact as information disclosure and does not indicate integrity or availability impact.
Which Android release is identified as affected?
The affected version listed is Android 12L. The issue is tracked by Android ID A-200035185.