Lucene search
Google_androidCVELIST:CVE-2023-21235HistoryAug 14, 2023 - 9:09 p.m.
CVE-2023-21235
2023-08-1421:09:50
google_android
raw.githubusercontent.com
1
cve-2023-21235
lockscreen pin
local escalation
In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
cve
cve
CVE-2023-21235
2023-08-14 22:15:12
prion
prion
Design/Logic Flaw
2023-08-14 22:15:00
androidsecurity
androidsecurity
Wear OS Security Bulletin—August 2023
2023-08-07 00:00:00