In ActivityStarter, there is a possible background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Link | Resource |
---|---|
https://source.android.com/docs/security/bulletin/android-14 | Release Notes Vendor Advisory |
Configurations
History
07 Nov 2023, 00:41
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
CWE | NVD-CWE-noinfo | |
First Time |
Google android
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
References | (MISC) https://source.android.com/docs/security/bulletin/android-14 - Release Notes, Vendor Advisory |
30 Oct 2023, 17:20
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-30 17:15
Updated : 2024-09-06 20:35
NVD link : CVE-2023-21343
Mitre link : CVE-2023-21343
JSON object : View
Products Affected
- android
CWE