CVE-2021-39771: Input Validation
Published Mar 30, 2022
·Updated
In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-198661951
Affected Software
1 affected component
Google Android=12.1
Event History
Mar 30, 2022
CVE Published
via MITRE·04:02 PM
Data Sourced
via MITRE·04:02 PM
DescriptionWeakness
Frequently Asked Questions
1
Which Android releases are identified as affected?
The affected version listed is Android 12L.
2
What access and user action are required for exploitation?
The CVSS vector identifies this as a local attack. Exploitation requires user interaction, while no privileges are required beforehand.
3
What could successful exploitation allow?
Successful exploitation could result in local escalation of privilege. The CVSS vector rates confidentiality, integrity, and availability impact as high.