Skip to content
Sign in
7.8 High

CVE-2023-21017 In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper…

Description

In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-236687884

Affected products and versions

Product Affected versions Fixed in
Android Versions not published

Other CVEs of Android

The 2441 CVEs of Android →
CVE-2023-21167 In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a… Not rated CVE-2023-21170 In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds… Not rated CVE-2023-21168 In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check Not rated CVE-2023-21169 In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check Not rated
Track this CVE