CVE-2023-43488

CVE-2023-43488 describes a vulnerability where a low-privileged (untrusted) application can modify a critical system property to enable the Android Debug Bridge (ADB) protocol over the network, potentially exposing a privileged shell on the device without USB access. Public sources in the connect...

CVE-2023-43488: Missing Authorization

The vulnerability allows a low privileged untrusted application to modify a critical system property that should be denied, in order to enable the ADB Android Debug Bridge protocol to be exposed on the network, exploiting it to gain a privileged shell on the device without requiring the physical...