CVE-2023-21260

2023-07-1300:01:32

google_android

www.cve.org

notification access

permission dialog box

malicious application

system message

user confirmation

overflow

AI Score

5.8

Confidence

High

EPSS

Percentile

15.5%

JSON

In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and possibly contains mis-leading information to be appeared as a system message for user confirmation.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Android",
    "vendor": "Google",
    "versions": [
      {
        "status": "affected",
        "version": "13, 12L, 12, 11"
      }
    ]
  }
]

References

source.android.com/security/bulletin/aaos/2023-07-01