CVE-2023-21133

Summary

CVE-2023-21133 is a vulnerability affecting the ManagePermissionsActivity.java file. In the onCreate method, a missing permission check enables an attacker to bypass factory reset protections with no need for additional execution privileges. This local privilege escalation can be exploited with physical access to the device after a factory reset, without requiring any user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.