CVE-2023-21086

In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary account due to a permissions bypass. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User...

CVE-2023-21086

CVE-2023-21086 concerns a permissions bypass in Android’s NFC runtime: in the isToggleable logic of SecureNfcEnabler.java and SecureNfcPreferenceController.java , an attacker could enable NFC from a secondary/guest account without additional execution privileges or user interaction. Reported as a...

CVE-2023-21086

In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary account due to a permissions bypass. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User...