{"id":"CVE-2021-39795","aliases":["A-201667614","ASB-A-201667614","EUVD-2021-26152","GHSA-cgmr-cgh3-873m"],"status":"rejected","title":"In multiple locations of MediaProvider.java , there is a possible way to get read/write access to...","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: Pulled from Android ASB#2022-04 publication (https://source.android.com/security/bulletin/2022-04-01) due to a functional regression. We will re-release this CVE at a future date, in a future publication that is currently TB","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-732"],"published":"2022-04-12T16:11:40Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":"platform/packages/providers/MediaProvider","fixed_in":["11:2022-12-01","12:2022-12-01","12L:2022-12-01","13:2022-12-01"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":"platform/packages/providers/MediaProvider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2022-12-01"}]}],"versions":["11"]},{"source":"osv","ecosystem":"Android","package":"platform/packages/providers/MediaProvider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-12-01"}]}],"versions":["12"]},{"source":"osv","ecosystem":"Android","package":"platform/packages/providers/MediaProvider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-12-01"}]}],"versions":["12L"]},{"source":"osv","ecosystem":"Android","package":"platform/packages/providers/MediaProvider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-39795"},{"url":"https://source.android.com/security/bulletin/2022-04-01"},{"url":"https://github.com/advisories/GHSA-cgmr-cgh3-873m"},{"url":"https://source.android.com/security/bulletin/2022-12-01","tags":["advisory"]},{"url":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bb4ec053ea16931e827f30c7b697cb35185a32be","tags":["fix"]}],"sources":{"cve":[{"id":"CVE-2021-39795","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: Pulled from Android ASB#2022-04 publication (https://source.android.com/security/bulletin/2022-04-01) due to a functional regression. We will re-release this CVE at a future date, in a future publication that is currently TB","status":"rejected","published":"2022-04-12T16:11:40Z","modified":"2022-06-07T19:37:00Z","updated_at":"2026-11-02T14:33:09.540052Z"}],"euvd":[{"id":"EUVD-2021-26152","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: Pulled from Android ASB#2022-04 publication (https://source.android.com/security/bulletin/2022-04-01) due to a functional regression. We will re-release this CVE at a future date, in a future publication that is currently TB","status":"published","published":"2022-04-12T16:11:40Z","modified":"2022-06-07T19:37:00Z","updated_at":"2026-11-03T03:51:08.805166Z"}],"ghsa":[{"id":"GHSA-cgmr-cgh3-873m","title":"In multiple locations of MediaProvider.java , there is a possible way to get read/write access to...","description":"In multiple locations of MediaProvider.java , there is a possible way to get read/write access to other app's dedicated, app-specific directory within external storage due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-201667614","status":"published","published":"2022-04-13T00:00:27Z","modified":"2023-01-27T05:01:37Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:41:55.795759Z"}],"nvd":[{"id":"CVE-2021-39795","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: Pulled from Android ASB#2022-04 publication (https://source.android.com/security/bulletin/2022-04-01) due to a functional regression. We will re-release this CVE at a future date, in a future publication that is currently TB","status":"rejected","published":"2022-04-12T17:15:08.123Z","modified":"2023-11-07T03:37:43.327Z","updated_at":"2026-11-02T14:07:06.029737Z"}],"osv":[{"id":"ASB-A-201667614","description":"In multiple locations of MediaProvider.java, there is a possible way to get read/write access to other applications’ dedicated, app-specific directory within external storage due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2022-12-01T00:00:00Z","modified":"2026-11-09T16:40:10.884737887Z","updated_at":"2026-11-10T17:35:05.376141Z"}]}}