Beveiligingsadvies

CVE-2023-21134

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-08-14 20:58:11

Laatst bijgewerkt 2024-10-09 19:11:41

Toegewezen door google_android

CVSS-score 6.8

Status PUBLISHED

Beschrijving

In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. User interaction is not needed for exploitation.

← Alle CVE's bekijken Bekijk op cve.org ↗