CISA-2023-21191 — Vulnetix

CISA-2023-21191 PUBLISHED

Reported by google_android · Published June 28, 2023

In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-269738057

Affected Products

Vendor	Product	Versions
n/a	Android	Android-13
n/a	Android	Android-13, Android-13

Timeline

Jun 28, 2023 CVE Published
Dec 4, 2024 CVE Updated

References

Open in Interactive Console →