ASB-A-185810717 — Vulnetix

ASB-A-185810717 PUBLISHED

In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	frameworks/base	10, 11:0, 11

Exploit Intelligence

nidhihcl/frameworks_base_AOSP_10_r33_CVE-2021-39696 (github-poc)

Timeline

Aug 1, 2022 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2022-08-01 advisory
https://android.googlesource.com/platform/frameworks/base/+/6ae9525c7fd6d72834be28298d836d8f30c0120c patch
https://android.googlesource.com/platform/frameworks/base/+/c668064c04be23384a02cc404e49c6261e76e21f patch

Open in Interactive Console →