CVE-2021-39623

CRITICAL

Android - Out-of-bounds Write in SimpleDecodingSource.cpp

Title source: llm
STIX 2.1

Description

In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194105348

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0252
EPSS Percentile 85.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (4)
google/android 9.0
google/android 10.0
google/android 11.0
google/android 12.0
Published Jan 14, 2022
Tracked Since Feb 18, 2026