CVE-2023-21110

2023-05-1500:00:00

google_android

www.cve.org

snoozehelper.java

resource exhaustion

local privilege escalation

android-11

android-12

android-12l

android-13

android

0.0004 Low

EPSS

Percentile

5.1%

JSON

In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258422365

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-11 Android-12 Android-12L Android-13",
        "status": "affected"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2023-05-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-21110