CVE-2023-21084

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262892300

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Apr 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-210858.8In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remoteCVE-2023-210867.8In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary accoCVE-2023-210875.5In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to local persistent deniaCVE-2023-210887.8In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch restrictions due to CVE-2023-210897.8In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive while the app is in theCVE-2023-21096.1Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0.CVE-2023-210905.0In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could lead to local deniaCVE-2023-210915.5In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission checkCVE-2023-210927.8In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver using permissions of SyCVE-2023-210937.8In extractRelativePath of FileUtils.java, there is a possible way to access files in a directory belonging to other applications due to a paCVE-2023-210947.8In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permissCVE-2023-210954.7In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This co
CVE-2023-21084: Medium severity, CVSS 6.7 | Vulnix