CVE-2021-39772
CVE-2021-39772
8.8
HighPublished:
Last updated:
Source:security@android.com
Modified
Weakness (CWE)
CVSS Vector
v3.1- Attack Vector
- Adjacent
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Description
In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-181962322
References
security@android.com
https://source.android.com/security/bulletin/android-12laf854a3a-2127-422b-91ae-364da2661108
https://source.android.com/security/bulletin/android-12l