CVE-2023-21313

2023-10-3016:56:29

google_android

github.com

core

local escalation

privilege

permission check

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.