CVE-2021-39621

In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-39621

CVE-2021-39621 is an Android elevation-of-privilege vulnerability in the LegacyModeSmsHandler.java’s sendLegacyVoicemailNotification. It relies on an unsafe PendingIntent to bypass permissions, enabling local privilege escalation from Android 9 to 12. The issue does not require user interaction f...