CVE-2023-21177

Name of the Vulnerable Software and Affected Versions Android versions Android-13

Description The issue is related to a missing permission check in the requestAppKeyboardShortcuts function of WindowManagerService.java. This could allow an attacker to infer the app a user is interacting with, potentially leading to local information disclosure. No additional execution privileges are needed for exploitation, and user interaction is not required.

Recommendations For Android version Android-13, consider restricting access to the requestAppKeyboardShortcuts function of WindowManagerService.java until a patch is available. As a temporary workaround, review and enforce proper permission checks to minimize the risk of exploitation.