Lucene search

Google_androidCVELIST:CVE-2023-21360

HistoryOct 30, 2023 - 4:56 p.m.

CVE-2023-21360

2023-10-3016:56:38

google_android

www.cve.org

bluetooth

vulnerability

local privilege

escalation

input validation

system execution

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "14",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

source.android.com/docs/security/bulletin/android-14