CVE-2023-21351

In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Configurations

Configuration 1 (hide)

cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*

History

15 Aug 2024, 22:15

Type Values Removed Values Added
References
  • {'url': 'https://source.android.com/docs/security/bulletin/android-14', 'name': 'https://source.android.com/docs/security/bulletin/android-14', 'tags': ['Vendor Advisory'], 'refsource': 'MISC'}
  • () https://android.googlesource.com/platform/frameworks/base/+/26522c0e82fd3a9bcbd01409217291d97dcdabcf -
  • () https://source.android.com/security/bulletin/2024-08-01 -
Summary In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

04 Nov 2023, 03:22

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Google android
Google
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
References (MISC) https://source.android.com/docs/security/bulletin/android-14 - (MISC) https://source.android.com/docs/security/bulletin/android-14 - Vendor Advisory
CPE cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*

30 Oct 2023, 17:20

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-30 17:15

Updated : 2024-08-16 15:35


NVD link : CVE-2023-21351

Mitre link : CVE-2023-21351


JSON object : View

Products Affected

google

  • android