6.2 Moyenne Exploitée

CVE-2023-21237 Android Pixel Information Disclosure Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-200

Description

In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Android	Versions non publiées
Android	13.0	Pas de correctif indiqué

Références

source.android.com source.android.com

Chronologie

Publiée 28 juin 2023
Ajoutée au catalogue KEV 5 mars 2024
Dernière modification 21 octobre 2025

Les 2441 CVE de Android →

CVE-2023-21167 In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a… Non notée CVE-2023-21170 In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds… Non notée CVE-2023-21169 In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check Non notée CVE-2023-21168 In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check Non notée

Suivre cette CVE