CVE-2023-21382

2023-10-3017:01:36

google_android

github.com

content resolver

metadata

permission check

information disclosure

exploitation

user interaction

AI Score

6.5

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.