CVE-2023-21017

In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21017

In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21017

CVE-2023-21017 affects Android 13 Pixel builds; the issue is in InstallStart.java where improper input validation can allow changing the installer package name. This vulnerability enables local privilege escalation with user-execution privileges and requires no user interaction. The CVSSv3.1 base...