CVE-2023-21231

In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2023-21231

creationtimestamp| type| source ---|---|--- 2023-08-15 02:19:43+00:00| seen| https://t.me/cibsecurity/68502 2025-04-13 23:27:44+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmq766vqrk2i...

CVE-2023-21231

CVE-2023-21231 is a Wear OS/Android framework issue where getIntentForButton in ButtonManager.java fails to perform a necessary permission check, allowing an unprivileged app to start a non-exported or permission-protected activity. This yields local escalation of privilege with no extra executio...