CVE-2021-39627

CVE-2021-39627 describes a permissions bypass in Android via an unsafe PendingIntent in LegacyModeSmsHandler.java (sendLegacyVoicemailNotification). Affected: Android 9–12 (Android-9, -10, -11, -12). Root cause: unsafe PendingIntent may allow elevation of privileges within a privileged process. I...

CVE-2021-39621

CVE-2021-39621 is an Android elevation-of-privilege vulnerability in the LegacyModeSmsHandler.java’s sendLegacyVoicemailNotification. It relies on an unsafe PendingIntent to bypass permissions, enabling local privilege escalation from Android 9 to 12. The issue does not require user interaction f...

CVE-2021-39627: Incorrect Permission Assignment for Critical Resource

In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39621: Incorrect Permission Assignment for Critical Resource

In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-10929

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description The issue is related to a possible permissions bypass due to an unsafe PendingIntent in the sendLegacyVoicemailNotification function of LegacyModeSmsHandler.java. This could lead to loc...

PT-2022-10935

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description The issue is related to a possible permissions bypass due to an unsafe PendingIntent in the sendLegacyVoicemailNotification function of LegacyModeSmsHandler.java. This could lead to loc...