VDB
CVE-2023-21270
CVE-2023-21270
PUBLISHED
In Google Android existieren mehrere Schwachstellen. Diese bestehen in den Komponenten "Android Runtime", "Framework", "Media Framework", "System", "Google Play system updates", "Kernel", "ARM components", "MediaTek components", "Qualcomm closed-source components" sowie "Qualcomm components". Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen. Für die Ausnutzung einiger dieser Schwachstellen ist eine Benutzerinteraktion erforderlich.
EPSS 0.03% · 9.0th percentile
Risk Scores
EPSS Score
0.03%
9.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Google Android 13 | ||
| Google Android 11 | ||
| Samsung | Samsung Android <= 13 | |
| Ubuntu | Ubuntu Linux | |
| Google Android 12 | ||
| Google Android 12L |
Exploit Intelligence
Timeline
- Aug 7, 2023 CVE Published
- Sep 19, 2023 CVE Updated
- Nov 20, 2024 EPSS Score
- Dec 8, 2024 EPSS Score
- Dec 26, 2024 EPSS Score
- Jan 12, 2025 EPSS Score
- Jan 30, 2025 EPSS Score
- Feb 16, 2025 EPSS Score
- Mar 6, 2025 EPSS Score
- Mar 23, 2025 EPSS Score
- Apr 10, 2025 EPSS Score
- Apr 27, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1981.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1981 advisory
- https://security.samsungmobile.com/securityUpdate.smsb advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1984.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1984 advisory
- https://ubuntu.com/security/notices/USN-6383-1 advisory
- https://source.android.com/docs/security/bulletin/pixel/2023-08-01 advisory
- https://source.android.com/docs/security/bulletin/2023-08-01 advisory