CVE-2023-21253 — Uncontrolled Resource Consumption in Google Android

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 81.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedOct 6

Description

In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5google/android4 versions+3
▶NVDgoogle/android4 versions+3

Patches

Patch: android.googlesource.com ↗Patch: android.googlesource.com ↗Patch: android.googlesource.com ↗

🔴Vulnerability Details

2
OSV
CVE-2023-21253: In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion↗2023-10-06
▶
GHSA
GHSA-2chj-m9fw-9mf5: In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion↗2023-10-06
▶

📋Vendor Advisories

1
Android
CVE-2023-21253: Android Security Bulletin 2023-10-01 CVE: CVE-2023-21253 Severity: HIGH Type: DoS Affected AOSP versions: 11, 12, 12L, 13 References: A-266580022 [2]↗2023-10-01
▶