CVE-2023-21370

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Oct 30, 2023

Updated: Nov 2, 2023

CWE ID 190

Summary

CVE-2023-21370 is a newly discovered vulnerability affecting the Security Element API. This issue involves an integer overflow leading to a possible out-of-bounds write. If successfully exploited, this vulnerability could result in local privilege escalation, allowing an attacker to execute system-level commands without user interaction. The severity of this vulnerability is high, as it does not require any user interaction for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/s4943U
https://www.cve.org/CVERecord?id=CVE-2023-21370
https://nvd.nist.gov/vuln/detail/CVE-2023-21370

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Russia-Aligned TAG-110 Targets Tajikistan with Macro-Enabled Word Documents

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Know What Matters

For Customers

For Partners