CVE-2023-21206

Summary

CVE-2023-21206 is a vulnerability affecting Android systems running version 13. In the codebase of the affected component, there is an issue in the function "initiateVenueUrlAnqpQueryInternal" of "sta_iface.cpp". This issue involves unsafe deserialization, potentially leading to an out-of-bounds read. The consequences of this vulnerability can result in local information disclosure. Importantly, no user interaction is required for an attacker to exploit this vulnerability, making it a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.