CVE-2021-39652

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In sec_ts_parsing_cmds of (TBD), there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-194499021References: N/A

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Dec 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-396537.8In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to localCVE-2021-396559.8Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/ACVE-2021-396566.7In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilCVE-2021-396574.4In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to locaCVE-2021-396589.8ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does not check the permisCVE-2021-396595.5In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to CVE-2021-39668.8usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem.CVE-2021-396607.0In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalCVE-2021-396617.8In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. ThCVE-2021-396627.8In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider collections due to a mCVE-2021-396637.8In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due to a confused deputyCVE-2021-396645.5In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inf
CVE-2021-39652: Medium severity, CVSS 6.7 | Vulnix