CVE-2023-21364
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Oct 30, 2023
Updated: Nov 2, 2023
Summary
CVE-2023-21364 is a vulnerability affecting the ContactsProvider in certain software. This issue results in a potential crash loop due to resource exhaustion in the Phone app. With user execution privileges, an attacker can exploit this vulnerability to cause local persistent denial of service, without requiring any user interaction.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Android