CVE-2023-21201

Summary

CVE-2023-21201 is a vulnerability affecting the Android operating system in the `on_create_record_event` function of the `btif_sdp_server.cc` file. This issue involves a missing null check, resulting in a possible out-of-bounds read. The consequences of this vulnerability are significant, as it enables remote denial-of-service attacks without requiring any additional execution privileges. User interaction is not necessary for exploitation. This issue was identified in Android-13 with the internal ID A-263545186.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.