CVE-2021-39732

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205992503References: N/A

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Mar 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-397336.7In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. This could lead to CVE-2021-397347.8In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due to a missing permiss CVE-2021-397356.4In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to lo CVE-2021-397366.7In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write due to an integer o CVE-2021-397379.8Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A CVE-2021-397387.8In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This could lead to local es CVE-2021-397393.3In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information CVE-2021-39747.8vim is vulnerable to Use After Free CVE-2021-397405.5In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local informati CVE-2021-397417.8In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with S CVE-2021-397425.5In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local informa CVE-2021-397437.8In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission check. This could le