Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2021-39686

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-200688826References: Upstream kernel

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

General Information

Products

  • Android

Additional Info

Technical Analysis