CVE-2021-39632

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-202159709

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jan 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-396335.5In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disCVE-2021-396347.8In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileCVE-2021-396359.1ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal appsCVE-2021-396364.4In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This coulCVE-2021-396374.4In CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds read due to a missing bounds check. This coCVE-2021-396386.7In periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a use after free. This could lead to local esCVE-2021-396396.8In TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check. This could lead to local escalation of prCVE-2021-39645.9elgg is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2021-396407.8In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation ofCVE-2021-396419.8Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/ACVE-2021-396426.4In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This could lead to localCVE-2021-396436.7In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of the
CVE-2021-39632: High severity, CVSS 7.8 | Vulnix