CVE-2021-39677

Name of the Vulnerable Software and Affected Versions Android versions Android-11

Description The issue is related to an out-of-bounds (OOB) read in the heap when the camera buffer size is 'zero'. This occurs in the startVideoStream() function.

Recommendations For Android version Android-11, consider restricting access to the startVideoStream() function until a patch is available. As a temporary workaround, avoid using the camera functionality with a 'zero' size buffer to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.