CVE-2023-21110

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-258422365

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-400CWE-770

Affected software

No affected versions have been published.

Timeline

Published
May 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-211115.5In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper inputCVE-2023-211125.5In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informaCVE-2023-211137.8In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege withCVE-2023-211147.8In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege withCVE-2023-211158.8In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could leCVE-2023-211166.7In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due CVE-2023-211177.8In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receivCVE-2023-211185.5In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informatioCVE-2023-21127.8Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0.CVE-2023-211207.8In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of CVE-2023-211217.8In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to impropCVE-2023-211227.8In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a mi
CVE-2023-21110: High severity, CVSS 7.8 | Vulnix