CVE-2023-21116

In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...

CVE-2023-21116

In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...

CVE-2023-21116

CVE-2023-21116 affects Android 11–13 and stems from a logic error in InstallPackageHelper.java, in verifyReplacingVersionCode, which could downgrade system apps below the system image version and enable local elevation of privilege with System privileges. Exploitation details are not provided in ...