CVE-2021-39740 - In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation

Back Back to CVE browser

MEDIUM

In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation

Published Mar 30, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.11%

Description

In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-209965112

Affected products

Vendor n/a Product Android Default
unknown
Affected
- Android-12L

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Android	unknown	Affected Android-12L

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26097
Advisory
https://source.android.com/security/bulletin/android-12l
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26097		Advisory
https://source.android.com/security/bulletin/android-12l		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner google_android

Published Mar 30, 2022

Updated Aug 4, 2024

Reserved Aug 23, 2021

Link CVE-2021-39740

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2021-39740

Red Hat

No data

ENISA EUVD

Assigner google_android

Published Mar 30, 2022

Updated Aug 4, 2024

Link EUVD-2021-26097

GitHub

No data