Skip to content
fr Sign in
Not rated

CVE-2023-21174 In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits…

Description

In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235822222

Affected products and versions

Product Affected versions Fixed in
Android Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Android

The 2441 CVEs of Android →
CVE-2023-21199 In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check Not rated CVE-2023-21210 In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input… Not rated CVE-2022-20443 In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay… Not rated CVE-2023-21183 In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the… Not rated
Track this CVE