CVE-2023-21179

2023-06-2800:00:00

google_android

www.cve.org

bypass

wifi encryption

android-13

privilege escalation

xmlutil.java

crypto

cve-2023-21179

android

EPSS

Percentile

5.1%

JSON

In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-272755865

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-13",
        "status": "affected"
      }
    ]
  }
]

References

source.android.com/security/bulletin/pixel/2023-06-01

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-21179