Skip to content
fr Sign in
Not rated

CVE-2023-21131 In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch…

Description

In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logic error in the code. This could lead to local escalation of privilege and the ability to launch arbitrary activities in settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-265015796

Affected products and versions

Product Affected versions Fixed in
Android Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Android

The 2441 CVEs of Android →
CVE-2023-21149 In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS… Not rated CVE-2023-21176 In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion Not rated CVE-2023-21175 In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due… Not rated CVE-2023-21066 In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow Not rated
Track this CVE