CVE-2021-39709

In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39709

creationtimestamp| type| source ---|---|--- 2022-03-16 17:26:45+00:00| seen| https://t.me/cibsecurity/39059...

CVE-2021-39709

CVE-2021-39709 is an Android 12 elevation-of-privilege issue. The root cause is an unsafe PendingIntent in SipAccountRegistry.java’s sendSipAccountsRemovedNotification, enabling a possible permission bypass. The vulnerability could allow local escalation to a higher privilege where attacker needs...