CVE-2021-39740

2022-03-3016:02:04

google_android

www.cve.org

messaging

attachment restrictions

information disclosure

android-12l

cve-2021-39740

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-209965112

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-12L"
      }
    ]
  }
]

References

source.android.com/security/bulletin/android-12l