VULNERABILITY INTELLIGENCE
CVE-2021-39726
CVSS score7.5 HIGH
EPSS probability0.76%
CISA KEVNot currently listed
Published2022-03-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-181782896References: N/A
Weakness classification
- CWE-125: Out-of-bounds Read
Primary references
- security@android.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory