Non notée
CVE-2023-21138 In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input…
Description
In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-273260090
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Android | Versions non publiées |
Références
- source.android.com source.android.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Android
Les 2441 CVE de Android →
CVE-2023-21147
In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code
Non notée
CVE-2023-21146
there is a possible way to corrupt memory due to a use after free
Non notée
CVE-2023-21158
In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow
Non notée
CVE-2023-21206
In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe…
Non notée