PT-2023-17934 · Google · Android

CVE-2023-21141

·

Publicado

2023-06-01

·

Atualizado

2024-12-17

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions Android-11 through Android-13
Description The issue is related to a permissions bypass in several functions of multiple files, allowing access to developer mode traces. This could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations For Android versions Android-11 through Android-13, consider restricting access to developer mode traces until a patch is available. As a temporary workaround, disabling developer mode may help minimize the risk of exploitation. No specific fix is provided for these versions, so it is essential to wait for an official update from the vendor.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ASB-A-262244249
CVE-2023-21141

Produtos afetados

Android