CVE-2023-21298

2023-10-3016:56:26

google_android

github.com

slice

disclosure

application

side channel

local escalation

privilege

exploitation

user interaction

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "android",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "14.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]