Vulnerability Name: | CVE-2021-39623 (CCN-217055) | ||||||||||||
Assigned: | 2021-08-23 | ||||||||||||
Published: | 2022-01-11 | ||||||||||||
Updated: | 2022-01-15 | ||||||||||||
Summary: | In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194105348 | ||||||||||||
CVSS v3 Severity: | 9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) 8.6 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R)
2.9 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:U/RC:R)
| ||||||||||||
CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||||||
Vulnerability Type: | CWE-269 | ||||||||||||
Vulnerability Consequences: | Denial of Service | ||||||||||||
References: | Source: CCN Type: Google Web site Android Source: MITRE Type: CNA CVE-2021-39623 Source: CCN Type: libstagefright Google Git libstagefright Source: XF Type: UNKNOWN android-cve202139623-dos(217055) Source: CCN Type: Packet Storm Security [01-12-2022] Libstagefright Heap Out-Of-Bounds Write Source: CCN Type: Full-Disclosure Mailing List, Tue, 11 Jan 2022 10:08:57 +0100 CVE-2021-39623 Libstagefright (Media Framework on Android) with OOB write on the heap | ||||||||||||
Vulnerable Configuration: | Configuration CCN 1:![]() | ||||||||||||
BACK |