CVE-2023-21143

2023-06-1519:15:10

CWE-20

[email protected]

web.nvd.nist.gov

cve-2023-21143

android

denial of service

improper input validation

nvd

security vulnerability

exploitation

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-268193777

Affected configurations

NVD

Node

googleandroidMatch11.0

googleandroidMatch12.0

googleandroidMatch12.1

googleandroidMatch13.0

CPENameOperatorVersion
google:androidgoogle androideq11.0
google:androidgoogle androideq12.0
google:androidgoogle androideq12.1
google:androidgoogle androideq13.0

CPE	Name	Operator	Version
google:android	google android	eq	11.0
google:android	google android	eq	12.0
google:android	google android	eq	12.1
google:android	google android	eq	13.0

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-11 Android-12 Android-12L Android-13",
        "status": "affected"
      }
    ]
  }
]