CVE-2021-39659

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-208267659

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-755

Affected software

No affected versions have been published.

Timeline

Published
Jan 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-39668.8usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem.CVE-2021-396607.0In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalCVE-2021-396617.8In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. ThCVE-2021-396627.8In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider collections due to a mCVE-2021-396637.8In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due to a confused deputyCVE-2021-396645.5In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local infCVE-2021-396656.5In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote infCVE-2021-396665.5In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local informatCVE-2021-396676.5In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer overflow. This could leadCVE-2021-396687.8In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalationCVE-2021-396697.8In onCreate of InstallCaCertificateWarning.java, there is a possible way to mislead an user about CA installation circumstances due to a tapCVE-2021-39678.8Improper Access Control in GitHub repository zulip/zulip prior to 4.10.
CVE-2021-39659: Medium severity, CVSS 5.5 | Vulnix