CVE-2021-39770: Medium severity android vulnerability
Published Mar 30, 2022
·Updated
In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-193033501
Affected Software
1 affected component
Google Android=12.1
Event History
Mar 30, 2022
CVE Published
via MITRE·04:02 PM
Data Sourced
via MITRE·04:02 PM
DescriptionWeakness
Frequently Asked Questions
1
Who could exploit this issue?
An attacker needs local access and low privileges on the Android device. No user interaction or additional execution privileges are required.
2
What information could be exposed?
The issue may disclose the device owner package, which is information about the package designated as the device owner.
3
Which Android version is identified as affected?
The provided data identifies Android 12L as affected.