CVE-2021-39762: Integer Overflow
Published Mar 30, 2022
·Updated
In tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-210625816
Affected Software
1 affected component
Google Android=12.1
Event History
Mar 30, 2022
CVE Published
via MITRE·04:02 PM
Data Sourced
via MITRE·04:02 PM
DescriptionWeakness
Frequently Asked Questions
1
Which systems are in scope for this issue?
The affected product and version identified are Google Android 12L. The issue is in tremolo.
2
What does an attacker need to exploit the vulnerability?
The CVSS vector indicates network-reachable exploitation with low attack complexity, no privileges, and no user interaction. Successful exploitation can disclose information remotely.