CVE-2023-21138
CVE-2023-21138
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Jun 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-273260090
Affected products
n/a · AndroidWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →