CVE-2021-39772: High severity android vulnerability

Published Mar 30, 2022

Updated

In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-181962322

Affected Software

1 affected component

Google Android=12.0

Event History

Mar 30, 2022

CVE Published

via MITRE·04:02 PM

Data Sourced

via MITRE·04:02 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-39772?

CVE-2021-39772 is considered a moderate severity vulnerability due to its potential for local escalation of privilege.

How do I fix CVE-2021-39772?

To fix CVE-2021-39772, ensure that your device is updated to the latest security patch provided by the manufacturer.

What type of vulnerability is CVE-2021-39772?

CVE-2021-39772 is a privilege escalation vulnerability in the Bluetooth A2DP audio control switch.

Can CVE-2021-39772 be exploited remotely?

No, CVE-2021-39772 requires local access and cannot be exploited remotely.

Is user interaction required to exploit CVE-2021-39772?

No, user interaction is not needed for the exploitation of CVE-2021-39772.