Skip to content
fr Sign in
7.8 High

CVE-2023-21092 In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver…

Description

In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver using permissions of System App due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-242040055

Affected products and versions

Product Affected versions Fixed in
Android Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Android

The 2441 CVEs of Android →
CVE-2023-21155 In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check Not rated CVE-2023-21190 In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without… Not rated CVE-2022-20443 In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay… Not rated CVE-2023-21226 In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds… Not rated
Track this CVE