In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-259064622
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2023-05-01 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
24 May 2023, 00:15
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* |
|
References | (MISC) https://source.android.com/security/bulletin/2023-05-01 - Patch, Vendor Advisory | |
First Time |
Google
Google android |
|
CWE | NVD-CWE-Other | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
15 May 2023, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-05-15 22:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-21103
Mitre link : CVE-2023-21103
CVE.ORG link : CVE-2023-21103
JSON object : View
Products Affected
- android
CWE