CVE-2021-39789: High severity android vulnerability
In Telecom, there is a possible leak of TTY mode change due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-203880906
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
An attacker needs local access with low privileges. No user interaction or additional execution privileges are required.
What is the potential impact of successful exploitation?
Successful exploitation could allow local privilege escalation, affecting confidentiality, integrity, and availability at high impact according to the supplied CVSS vector.
Which Android release is identified as affected?
The provided data identifies Android 12L as the affected version.
What component is involved?
The issue is in the Telecom component and involves a missing permission check related to TTY mode changes.