CVE-2023-21331

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Oct 30, 2023

Updated: Nov 7, 2023

CWE ID 203

Summary

CVE-2023-21331 is a newly disclosed vulnerability affecting InputMethod. Hackers can potentially determine if an app is installed on a system without proper query permissions, due to side channel information disclosure. This local information disclosure vulnerability does not require any additional execution privileges or user interaction for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/s5L87_
https://www.cve.org/CVERecord?id=CVE-2023-21331
https://nvd.nist.gov/vuln/detail/CVE-2023-21331

Back to Vulnerability Database