CVE-2023-21132 in Android

Resumen

por MITRE • 2023-08-15

In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 2022-11-03
• Divulgación: 2023-08-15
• Moderación: aceptado
• Artículo: VDB-237184
• CPE: listo
• CWE: CWE-275 (confirmado)
• CVSS: 6.8 (NVD)
• EPSS: 0.00125
• KEV: no
• Actividades: muy bajo
• Sector: Police, Insurance, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-21132
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-21132
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-21132/