CVE-2021-39790: High severity android vulnerability
Published Mar 30, 2022
·Updated
In Dialer, there is a possible way to manipulate visual voicemail settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-186405146
Affected Software
1 affected component
Google Android=12.1
Event History
Mar 30, 2022
CVE Published
via MITRE·04:02 PM
Data Sourced
via MITRE·04:02 PM
DescriptionWeakness
Frequently Asked Questions
1
What access and conditions does an attacker need to exploit this issue?
The attack vector is local and requires user interaction. No privileges or additional execution privileges are required before exploitation.
2
Which Android versions are identified as affected?
The provided data identifies Android 12L as affected.
3
What is the potential impact if exploitation succeeds?
Successful exploitation could allow local escalation of privilege and affect confidentiality, integrity, and availability at a high level.