CVE-2021-39632

HIGH

Android 11-12 - Out-of-bounds Write in events.cpp inotify_cb

Title source: llm
STIX 2.1

Description

In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-202159709

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0012
EPSS Percentile 2.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (2)
google/android 11.0
google/android 12.0
Published Jan 14, 2022
Tracked Since Feb 18, 2026