CVE-2023-21091

In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check. This could lead to local denial of service across user boundaries with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-21091

In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check. This could lead to local denial of service across user boundaries with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-21091

The CVE-2023-21091 entry affects Android 13 and involves the canDisplayLocalUi path in AppLocalePickerActivity.java. The underlying issue is a missing permission check that could allow changing system app locales, enabling a local denial of service across user boundaries. Exploitation is describe...