VDB
CVE-2021-39767
CVE-2021-39767
PUBLISHED
CVSS 7.800000190734863 HIGH
In miniadb, there is a possible way to get read/write access to recovery system properties due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-201308542
EPSS 0.11% · 1.6th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.11%
1.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Android | Android-12L |
| android | 12.1 |
Timeline
- Mar 30, 2022 CVE Published
- Mar 31, 2022 EPSS Score
- Apr 6, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 11, 2022 EPSS Score
- Aug 31, 2022 EPSS Score
- Oct 21, 2022 EPSS Score
- Dec 11, 2022 EPSS Score
- Jan 31, 2023 EPSS Score
- Mar 22, 2023 EPSS Score
- May 12, 2023 EPSS Score
- Jul 2, 2023 EPSS Score