CVE-2023-21115

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-258834033

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published
Jun 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-211166.7In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due CVE-2023-211177.8In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receivCVE-2023-211185.5In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informatioCVE-2023-21127.8Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0.CVE-2023-211207.8In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of CVE-2023-211217.8In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connected VPN due to impropCVE-2023-211227.8In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a miCVE-2023-211237.8In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a CVE-2023-211247.8In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of CVE-2023-211258.0In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free. This could lead to local escaCVE-2023-211267.8In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe ICVE-2023-211278.8In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code
CVE-2023-21115: High severity, CVSS 8.8 | Vulnix