CVE-2023-21143 — Improper Input Validation in Google Android

CWE-20 — Improper Input ValidationCWE-120 — Classic Buffer Overflow4 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 96.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Platform Frameworks BaseGoogle Android
Timeline
PublishedJun 15

Description

In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-268193777

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5google/androidAndroid-11 Android-12 Android-12L Android-13
▶NVDgoogle/android4 versions+3
▶Androidplatform/frameworks_base13-next:0 — 13-next:2023-06-01+4

Patches

Patch: source.android.com ↗Patch: source.android.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-7v7w-c97g-6mp4: In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation↗2023-06-15
▶
OSV
CVE-2023-21143: In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation↗2023-06-01
▶

📋Vendor Advisories

1
Android
CVE-2023-21143: Android Security Bulletin 2023-06-01 CVE: CVE-2023-21143 Severity: HIGH Type: DoS Affected AOSP versions: 11, 12, 12L, 13 References: A-268193777↗2023-06-01
▶