CVE-2023-21364

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Oct 30, 2023
Updated: Nov 2, 2023

Summary

CVE-2023-21364 is a vulnerability affecting the ContactsProvider in certain software. This issue results in a potential crash loop due to resource exhaustion in the Phone app. With user execution privileges, an attacker can exploit this vulnerability to cause local persistent denial of service, without requiring any user interaction.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share