CVE-2021-39708

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-206128341

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Mar 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-397097.8In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This CVE-2021-39716.7A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly CVE-2021-397109.8Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A CVE-2021-397114.4In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local informa CVE-2021-397126.4In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege w CVE-2021-397137.0Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel CVE-2021-397147.8In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privi CVE-2021-397154.4In __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure. This could lead to l CVE-2021-397167.5Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A CVE-2021-397174.4In iaxxx_btp_write_words of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local i CVE-2021-397186.7In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds ch CVE-2021-397196.7In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This could lead to local e