Lucene search

K
vulnrichmentGoogle_androidVULNRICHMENT:CVE-2023-21398
HistoryOct 30, 2023 - 5:01 p.m.

CVE-2023-21398

2023-10-3017:01:39
google_android
github.com
sdksandbox
strandhogg style overlay attack
logic error
local privilege escalation
user interaction

AI Score

7.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

7.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-21398