CVE-2023-21319

2023-10-3016:56:31

google_android

www.cve.org

usagestatsservice

information disclosure

3rd party apps

AI Score

5.9

Confidence

High

EPSS

Percentile

5.1%

JSON

In UsageStatsService, there is a possible way to read installed 3rd party apps due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "14",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

source.android.com/docs/security/bulletin/android-14