CVE-2021-39788: Medium severity android vulnerability
In TelecomManager, there is a possible way to check if a particular self managed phone account was registered on the device due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-191768014
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs local access and low-level privileges on the Android device. No user interaction is required.
What information could be exposed?
The issue may allow an attacker to determine, through side-channel information, whether a particular self-managed phone account is registered on the device. The reported impact is information disclosure; integrity and availability are not affected.
Which Android release is identified as affected?
The provided data identifies Android 12L as affected.