CVE-2023-21240
published 2023-07-13CVE-2023-21240: In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution…
PriorityP422medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.09%
0.6th percentile
In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | frameworks_base | >= 11:0 < 11:2023-07-01 | 11:2023-07-01 |
| platform | packages_modules_wifi | >= 12:0 < 12:2023-07-01 | 12:2023-07-01 |
| platform | packages_modules_wifi | >= 12L:0 < 12L:2023-07-01 | 12L:2023-07-01 |
| platform | packages_modules_wifi | >= 13-next:0 < 13-next:2023-07-01 | 13-next:2023-07-01 |
| platform | packages_modules_wifi | >= 13:0 < 13:2023-07-01 | 13:2023-07-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-672c-38pw-m2m5: In Policy of Policy
ghsa_unreviewed·2023-07-13
CVE-2023-21240 [MEDIUM] CWE-400 GHSA-672c-38pw-m2m5: In Policy of Policy
In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
OSV
CVE-2023-21240: In Policy of Policy
osv·2023-07-01
CVE-2023-21240 CVE-2023-21240: In Policy of Policy
In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Android
CVE-2023-21240: Android Security Bulletin 2023-07-01
CVE: CVE-2023-21240
Severity: HIGH
Type: DoS
Affected AOSP versions: 11, 12, 12L, 13
References: A-275340417
vendor_android·2023-07-01·CVSS 5.5
CVE-2023-21240 [MEDIUM] CVE-2023-21240: Android Security Bulletin 2023-07-01
CVE: CVE-2023-21240
Severity: HIGH
Type: DoS
Affected AOSP versions: 11, 12, 12L, 13
References: A-275340417
Android Security Bulletin 2023-07-01
CVE: CVE-2023-21240
Severity: HIGH
Type: DoS
Affected AOSP versions: 11, 12, 12L, 13
References: A-275340417
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://android.googlesource.com/platform/packages/modules/Wifi/+/69119d1d3102e27b6473c785125696881bce9563https://source.android.com/security/bulletin/2023-07-01https://android.googlesource.com/platform/packages/modules/Wifi/+/69119d1d3102e27b6473c785125696881bce9563https://source.android.com/security/bulletin/2023-07-01
2023-07-13
Published