CVE-2021-39805: Medium severity Google Android vulnerability

Published Apr 4, 2022

Updated

In l2cbleprocesssigcmd of l2cble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-212694559

Affected Software

3 affected components

Google Android=12.0

Google Android=12.1

Google Android

Event History

Apr 4, 2022

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Apr 12, 2022

CVE Published

via MITRE·04:11 PM

Data Sourced

via MITRE·04:11 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-39805?

CVE-2021-39805 is classified as a moderate severity vulnerability due to the potential for remote information disclosure through Bluetooth.

How do I fix CVE-2021-39805?

To fix CVE-2021-39805, users should update their Android devices to the latest patched version provided by Google.

What platforms are affected by CVE-2021-39805?

CVE-2021-39805 affects Android versions 12.0 and 12.1.

What kind of vulnerability is CVE-2021-39805?

CVE-2021-39805 is an out of bounds read vulnerability in Bluetooth functionality.

Is user interaction required to exploit CVE-2021-39805?

No, user interaction is not needed for the exploitation of CVE-2021-39805.