CVE-2023-21252: Input Validation
In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-21252?
CVE-2023-21252 is a vulnerability in WifiConfigurationUtil.java in Google Android that allows an attacker to cause a denial of service by triggering a boot loop.
What is the severity of CVE-2023-21252?
CVE-2023-21252 has a severity value of 7, which is classified as high severity.
How does CVE-2023-21252 impact the device?
CVE-2023-21252 can lead to a local denial of service on the device without requiring additional execution privileges.
Is user interaction required for exploiting CVE-2023-21252?
No, user interaction is not needed for exploiting CVE-2023-21252.
How can I fix CVE-2023-21252?
To fix CVE-2023-21252, it is recommended to apply the latest security updates provided by Google for Android.