CVE-2023-21103

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-259064622

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-209

Affected software

No affected versions have been published.

Timeline

Published
May 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-211045.5In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional exCVE-2023-211055.5In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local CVE-2023-211067.8In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privCVE-2023-211077.8In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilegeCVE-2023-211088.8In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code CVE-2023-211097.8In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error in the code. This couCVE-2023-21114.9The Fast & Effective Popups & Lead-Generation for WordPress plugin before 2.1.4 concatenates user input into an SQL query without escaping iCVE-2023-211107.8In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaustion. This could leadCVE-2023-211115.5In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper inputCVE-2023-211125.5In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informaCVE-2023-211137.8In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege withCVE-2023-211147.8In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with
CVE-2023-21103: Medium severity, CVSS 5.5 | Vulnix