CVE-2021-39734

In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208650395References: N/A

• CWE-862

• https://source.android.com/security/bulletin/pixel/2022-03-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2022-03-01Vendor Advisory

Published

Mar 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39729In the TitanM chip, there is a possible out of bounds write …6.7
• CVE-2021-3973vim is vulnerable to Heap-based Buffer Overflow7.8
• CVE-2021-39730In TBD of TBD, there is a possible out of bounds read due to…4.4
• CVE-2021-39731In ProtocolStkProactiveCommandAdapter::Init of protocolstkad…6.7
• CVE-2021-39732In copy_io_entries of lwis_ioctl.c, there is a possible out …7.8
• CVE-2021-39733In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a po…6.7
• CVE-2021-39735In gasket_alloc_coherent_memory of gasket_page_table.c, ther…6.4
• CVE-2021-39736In prepare_io_entry and prepare_response of lwis_ioctl.c and…6.7
• CVE-2021-39737Product: AndroidVersions: Android kernelAndroid ID: A-208229…9.8
• CVE-2021-39738In CarSetings, there is a possible to pair BT device bypassi…7.8
• CVE-2021-39739In ArrayMap, there is a possible leak of the content of SMS …3.3
• CVE-2021-3974vim is vulnerable to Use After Free7.8