CVE-2023-21391

2023-10-3017:01:38

google_android

www.cve.org

messaging

denial of service

input validation

AI Score

Confidence

High

EPSS

0.001

Percentile

20.4%

JSON

In Messaging, there is a possible way to disable the messaging application due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "14",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

source.android.com/docs/security/bulletin/android-14