In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
| Link | Resource |
|---|---|
| https://android.googlesource.com/platform/frameworks/base/+/4dea696369a309cf39daa3e94fec7156c290a9c2 | Broken Link |
| https://source.android.com/security/bulletin/2023-08-01 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Oct 2024, 16:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-269 |
18 Aug 2023, 19:56
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-20 | |
| CPE | cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:* cpe:2.3:o:google:android:11.0:-:*:*:*:*:*:* cpe:2.3:o:google:android:12.1:-:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://source.android.com/security/bulletin/2023-08-01 - Patch, Vendor Advisory | |
| References | (MISC) https://android.googlesource.com/platform/frameworks/base/+/4dea696369a309cf39daa3e94fec7156c290a9c2 - Broken Link |
14 Aug 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-14 22:15
Updated : 2024-10-09 16:35
NVD link : CVE-2023-21272
Mitre link : CVE-2023-21272
CVE.ORG link : CVE-2023-21272
JSON object : View
Products Affected
- android