cbcvebase.
CVE-2023-21287
published 2023-08-14

CVE-2023-21287: In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution…

PriorityP260critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.42%
33.6th percentile
In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

14 ranges
VendorProductVersion rangeFixed in
googleandroid——
googleandroid——
googleandroid——
googleandroid——
googleandroid——
googleandroid——
googleandroid——
googleandroid——
googleandroid——
platformexternal_freetype>= 11:0 < 11:2023-08-0111:2023-08-01
platformexternal_freetype>= 12:0 < 12:2023-08-0112:2023-08-01
platformexternal_freetype>= 12L:0 < 12L:2023-08-0112L:2023-08-01
platformexternal_freetype>= 13-next:0 < 13-next:2023-08-0113-next:2023-08-01
platformexternal_freetype>= 13:0 < 13:2023-08-0113:2023-08-01

Detection & IOCsextracted from sources · hover to see the quote

  • →CVE-2023-21287 is a remote code execution vulnerability via type confusion in Android (AOSP versions 11, 12, 12L, 13), requiring no privileges or user interaction — prioritize detection of anomalous process spawning or code execution from system services on affected Android versions. ↗
  • →Target scope for detection: Android OS versions 11, 12, 12L, and 13 are confirmed affected; focus monitoring on unpatched devices running these versions. ↗
  • →Reference Android internal bug tracker ID A-278221085 when correlating vendor patch notes or OEM advisories for this vulnerability. ↗
  • ·No specific exploit payload, hash, network indicator, or PoC code is publicly disclosed in the available sources; no concrete IOCs can be extracted at this time. ↗
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.