Vulnerability Name: | CVE-2021-39659 (CCN-217394) | ||||||||||||
Assigned: | 2021-08-23 | ||||||||||||
Published: | 2022-01-04 | ||||||||||||
Updated: | 2022-01-20 | ||||||||||||
Summary: | In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-208267659 | ||||||||||||
CVSS v3 Severity: | 5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) 4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 4.7 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C)
| ||||||||||||
Vulnerability Type: | CWE-755 | ||||||||||||
Vulnerability Consequences: | Denial of Service | ||||||||||||
References: | Source: CCN Type: Google Web site Android Source: MITRE Type: CNA CVE-2021-39659 Source: XF Type: UNKNOWN android-cve202139659-dos(217394) Source: MISC Type: Vendor Advisory https://source.android.com/security/bulletin/2022-01-01 Source: CCN Type: Android Open Source Project Pixel Update Bulletin-January 2022 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||||||
BACK |