CVE-2023-35669

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Vendor	Product	Versions
Google	Android	13; 12L; 12; 11
google	android	11; 12; 12l; 13

References

https://android.googlesource.com/platform/frameworks/base/+/f810d81839af38ee121c446105ca67cb12992fc6Issue Tracking, Patch
https://source.android.com/security/bulletin/2023-09-01Vendor Advisory
https://android.googlesource.com/platform/frameworks/base/+/f810d81839af38ee121c446105ca67cb12992fc6Issue Tracking, Patch
https://source.android.com/security/bulletin/2023-09-01Vendor Advisory

Timeline

Published: Sep 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-35677.1A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker CVE-2023-356707.8In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a pat CVE-2023-356715.5In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number a CVE-2023-356738.8In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proxim CVE-2023-356747.8In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead t CVE-2023-356755.5In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user o CVE-2023-356767.8In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsaf CVE-2023-356775.5In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could lea CVE-2023-356795.5In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information CVE-2023-35684.8Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.CVE-2023-356805.5In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. This could lead to loca CVE-2023-356819.8In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remo