CVE-2021-39759: Integer Overflow
Published Mar 30, 2022
·Updated
In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-180200830
Affected Software
1 affected component
Google Android=12.1
Event History
Mar 30, 2022
CVE Published
via MITRE·04:02 PM
Data Sourced
via MITRE·04:02 PM
DescriptionWeakness
Frequently Asked Questions
1
Can this issue be exploited remotely?
No. The CVSS vector specifies local attack access, so an attacker needs local access to the affected device.
2
Does exploitation require user interaction or elevated execution privileges?
No user interaction is required. The attacker needs low privileges and does not need additional execution privileges.
3
Which Android release is identified as affected?
The record identifies Android 12L.