CVE-2021-39619

2022-02-1117:40:44

google_android

www.cve.org

0.0004 Low

EPSS

Percentile

5.1%

JSON

In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings of app usage due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-197399948

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11 Android-12"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2022-02-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2021-39619