CVE-2021-39793

In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N/A

Affected

Android

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.69% chance of exploitation in the next 30 days, 52nd percentile

CISA KEV

added 2022-04-11

Published

2022-03-16

Updated

2025-10-21

Proof-of-concept exploits (1)

• assad12341/Kernel-Exploitation-Techniques-2★ · 2025-06-13

Security advisories

• https://source.android.com/security/bulletin/pixel/2022-03-01
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39793

References

• CVE Record
• NVD entry

Related

• CVE-2022-22265
• CVE-2022-22706
• CVE-2025-31650
• CVE-2025-49144