CVE-2021-39740

In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-209965112

• CWE-20

• https://source.android.com/security/bulletin/android-12lVendor Advisory
• https://source.android.com/security/bulletin/android-12lVendor Advisory

Published

Mar 30, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39735In gasket_alloc_coherent_memory of gasket_page_table.c, ther…6.4
• CVE-2021-39736In prepare_io_entry and prepare_response of lwis_ioctl.c and…6.7
• CVE-2021-39737Product: AndroidVersions: Android kernelAndroid ID: A-208229…9.8
• CVE-2021-39738In CarSetings, there is a possible to pair BT device bypassi…7.8
• CVE-2021-39739In ArrayMap, there is a possible leak of the content of SMS …3.3
• CVE-2021-3974vim is vulnerable to Use After Free7.8
• CVE-2021-39741In Keymaster, there is a possible out of bounds write due to…7.8
• CVE-2021-39742In Voicemail, there is a possible way to retrieve a trackabl…5.5
• CVE-2021-39743In PackageManager, there is a possible way to update the las…7.8
• CVE-2021-39744In DevicePolicyManager, there is a possible way to determine…5.5
• CVE-2021-39745In DevicePolicyManager, there is a possible way to determine…5.5
• CVE-2021-39746In PermissionController, there is a possible way to delete s…7.8