CVE-2021-39632

In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-202159709

• CWE-787

• https://source.android.com/security/bulletin/2022-01-01Vendor Advisory
• https://source.android.com/security/bulletin/2022-01-01Vendor Advisory

Published

Jan 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39627In sendLegacyVoicemailNotification of LegacyModeSmsHandler.j…7.8
• CVE-2021-39628In StatusBar.java, there is a possible disclosure of notific…3.3
• CVE-2021-39629In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there …7
• CVE-2021-3963kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)4.3
• CVE-2021-39630In executeRequest of OverlayManagerService.java, there is a …7.8
• CVE-2021-39631In clear_data_dlg_text of strings.xml, there is a possible s…5.5
• CVE-2021-39633In gre_handle_offloads of ip_gre.c, there is a possible page…5.5
• CVE-2021-39634In fs/eventpoll.c, there is a possible use after free. This …7.8
• CVE-2021-39635ims_ex is a vendor system service used to manage VoLTE in un…9.1
• CVE-2021-39636In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there i…4.4
• CVE-2021-39637In CreateDeviceInfo of trusty_remote_provisioning_context.cp…4.4
• CVE-2021-39638In periodic_io_work_func of lwis_periodic_io.c, there is a p…6.7