CVE-2021-39763: Input Validation
Published Mar 30, 2022
·Updated
In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-199176115
Affected Software
1 affected component
Google Android=12.1
Event History
Mar 30, 2022
CVE Published
via MITRE·04:02 PM
Data Sourced
via MITRE·04:02 PM
DescriptionWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
Exploitation requires local access and low privileges. No user interaction or additional execution privileges are needed.
2
Which Android releases are identified as affected?
The affected version listed is Android 12L for Google Android.
3
How can I identify this issue in Android security tracking?
The Android issue identifier is A-199176115. The vulnerability is also tracked as CVE-2021-39763.