Aller au contenu
en Se connecter
Non notée

CVE-2023-21131 In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch…

Description

In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logic error in the code. This could lead to local escalation of privilege and the ability to launch arbitrary activities in settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-265015796

Produits et versions touchés

Produit Versions touchées Corrigé en
Android Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Android

Les 2441 CVE de Android →
CVE-2023-21201 In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check Non notée CVE-2023-21226 In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds… Non notée CVE-2023-21190 In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without… Non notée CVE-2023-21156 In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation Non notée
Suivre cette CVE