PT-2022-11037

CVE-2021-39759

·

Published

2022-03-30

·

Updated

2022-04-05

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions prior to Android-12L
Description The issue is related to an integer overflow in libstagefright, which could lead to a possible out of bounds write. This could result in local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
Recommendations For Android versions prior to Android-12L, update to Android-12L or a later version to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-190: Integer Overflow or Wraparound
Related identifiers
CVE-2021-39759
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com