CVE-2023-21137 — Improper Check for Unusual or Exceptional Conditions in Google Android

CWE-754 — Improper Check for Unusual or Exceptional Conditions5 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 90.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Platform Frameworks BaseGoogle Android
Timeline
PublishedJun 15

Description

In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-246541702

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5google/androidAndroid-11 Android-12 Android-12L Android-13
▶NVDgoogle/android4 versions+3
▶Androidplatform/frameworks_base13-next:0 — 13-next:2023-06-01+4

Patches

Patch: source.android.com ↗Patch: source.android.com ↗

🔴Vulnerability Details

3
OSV
CVE-2023-21137: In several methods of JobStore↗2023-06-15
▶
GHSA
GHSA-5w58-7q99-f8cr: In several methods of JobStore↗2023-06-15
▶
OSV
CVE-2023-21137: In several methods of JobStore↗2023-06-01
▶

📋Vendor Advisories

1
Android
CVE-2023-21137: Android Security Bulletin 2023-06-01 CVE: CVE-2023-21137 Severity: HIGH Type: DoS Affected AOSP versions: 11, 12, 12L, 13 References: A-246541702↗2023-06-01
▶