PT-2022-11001
CVE-2021-39722
·
Published
2022-03-16
·
Updated
2022-03-22
Description by
CVSS 2.0
2.1
LowMetricsAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to an incorrect bounds check in the
ProtocolStkProactiveCommandAdapter::Init function of protocolstkadapter.cpp, which could lead to a possible out of bounds read. This may result in local information disclosure, requiring System execution privileges for exploitation. No user interaction is needed for exploitation.Recommendations
For Android kernel, consider applying a patch that fixes the incorrect bounds check in the
ProtocolStkProactiveCommandAdapter::Init function to prevent potential out of bounds read and local information disclosure.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾