CVE-2021-39764

2022-03-3016:02:29

google_android

www.cve.org

android

local privilege escalation

app spoofing

improper input validation

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

17.6%

JSON

In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via app spoofing with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-170642995

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-12L"
      }
    ]
  }
]

References

source.android.com/security/bulletin/android-12l