GSD-2023-21339 — Vulnetix

GSD-2023-21339 PUBLISHED CVSS 7.5 HIGH

In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Risk Scores

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
google	android	0
Google	Android	14

Timeline

Oct 30, 2023 CVE Published
Aug 17, 2025 PoC Published

References

https://source.android.com/docs/security/bulletin/android-14 url

Open in Interactive Console →