{"id":"CVE-2021-39764","aliases":["EUVD-2021-26121","GHSA-pmm8-gv2p-645q"],"status":"published","title":"In Settings, there is a possible way to display an incorrect app name due to improper input...","description":"In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via app spoofing with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-170642995","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00329,"percentile":0.2623,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2022-03-30T16:02:29Z","modified":"2026-06-17T04:04:07Z","products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/android-12l","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-39764"},{"url":"https://github.com/advisories/GHSA-pmm8-gv2p-645q"}],"sources":{"cve":[{"id":"CVE-2021-39764","description":"In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via app spoofing with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-170642995","status":"published","published":"2022-03-30T16:02:29Z","modified":"2024-08-04T02:13:38.421Z","updated_at":"2026-11-02T14:33:09.540052Z"}],"euvd":[{"id":"EUVD-2021-26121","description":"In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via app spoofing with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-170642995","status":"published","published":"2022-03-30T16:02:29Z","modified":"2024-08-04T02:13:38Z","updated_at":"2026-11-03T03:24:22.263982Z"}],"ghsa":[{"id":"GHSA-pmm8-gv2p-645q","title":"In Settings, there is a possible way to display an incorrect app name due to improper input...","description":"In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via app spoofing with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-170642995","status":"published","published":"2022-03-31T00:00:19Z","modified":"2023-01-27T05:01:16Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:41:51.095902Z"}],"nvd":[{"id":"CVE-2021-39764","description":"In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via app spoofing with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-170642995","status":"published","published":"2022-03-30T16:15:10.04Z","modified":"2026-06-17T04:04:07.407Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:05.581807Z"}]}}