CVE-2021-39726

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-181782896References: N/A

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Mar 16, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-397274.1In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information disclosure due to a CVE-2021-397296.7In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege CVE-2021-39737.8vim is vulnerable to Heap-based Buffer OverflowCVE-2021-397304.4In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with SyCVE-2021-397316.7In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds chCVE-2021-397327.8In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation CVE-2021-397336.7In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. This could lead to CVE-2021-397347.8In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due to a missing permissCVE-2021-397356.4In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to loCVE-2021-397366.7In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write due to an integer oCVE-2021-397379.8Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/ACVE-2021-397387.8In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This could lead to local es
CVE-2021-39726: High severity, CVSS 7.5 | Vulnix