CVE-2023-21096
published 2023-04-19CVE-2023-21096: In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges…
PriorityP353critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.47%
37.5th percentile
In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-254774758
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | packages_modules_bluetooth | >= 13-next:0 < 13-next:2023-04-01 | 13-next:2023-04-01 |
| platform | packages_modules_bluetooth | >= 13:0 < 13:2023-04-01 | 13:2023-04-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2023-21096: Android Security Bulletin 2023-04-01
CVE: CVE-2023-21096
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 12, 12L, 13
References: A-254774758
[2]
vendor_android·2023-04-01·CVSS 9.8
CVE-2023-21096 [CRITICAL] CVE-2023-21096: Android Security Bulletin 2023-04-01
CVE: CVE-2023-21096
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 12, 12L, 13
References: A-254774758
[2]
Android Security Bulletin 2023-04-01
CVE: CVE-2023-21096
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 12, 12L, 13
References: A-254774758
[2]
[3]
GHSA
GHSA-q697-jx8q-hvf2: In OnWakelockReleased of attribution_processor
ghsa_unreviewed·2023-04-19
CVE-2023-21096 [CRITICAL] CWE-416 GHSA-q697-jx8q-hvf2: In OnWakelockReleased of attribution_processor
In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-254774758
OSV
CVE-2023-21096: In OnWakelockReleased of attribution_processor
osv·2023-04-01
CVE-2023-21096 CVE-2023-21096: In OnWakelockReleased of attribution_processor
In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-04-19
Published