CVE-2021-39659

MEDIUM

Android - Denial of Service in CreateConnectionProcessor

Title source: llm
STIX 2.1

Description

In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-208267659

References (1)

Core 1
Core References

Scores

CVSS v3 5.5
EPSS 0.0011
EPSS Percentile 1.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-755
Status published
Products (3)
google/android 10.0
google/android 11.0
google/android 12.0
Published Jan 14, 2022
Tracked Since Feb 18, 2026