Lucene search
Google_androidCVELIST:CVE-2023-21171HistoryJun 28, 2023 - 12:00 a.m.
CVE-2023-21171
2023-06-2800:00:00
google_android
www.cve.org
3
android
inputdispatcher.cpp
click fraud
vulnerability
local escalation
privilege
system execution
android-13
a-261085213
EPSS
0
Percentile
5.1%
In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261085213
CNA Affected
[
{
"vendor": "n/a",
"product": "Android",
"versions": [
{
"version": "Android-13",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2023-21171
2023-06-28 18:15:14
prion
prion
Information disclosure
2023-06-28 18:15:00
nvd
nvd
CVE-2023-21171
2023-06-28 18:15:14