CVE-2021-39726

In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-181782896References: N/A

Score

CVSS 3.1 7.5 High

Status

Modified - security@android.com

Published

2022-03-16

Last modified

2024-08-04

Weaknesses

CWE-125

Affected products

• Android (Google)

References

• https://source.android.com/security/bulletin/pixel/2022-03-01