CVE-2023-21253: Medium severity Google Android vulnerability
Published Oct 2, 2023
·Updated
In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
5 affected components
Google Android=11.0
Google Android=12.0
Google Android=12.1
Google Android=13.0
Google Android
Remediation
Patch Available
Event History
Oct 2, 2023
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Oct 6, 2023
CVE Published
via MITRE·06:48 PM
Data Sourced
via MITRE·06:48 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2023-21253.
2
What is the severity of CVE-2023-21253?
The severity of CVE-2023-21253 is high with a value of 7.
3
What is affected by CVE-2023-21253?
Google Android is affected by CVE-2023-21253.
4
How can CVE-2023-21253 be exploited?
CVE-2023-21253 can be exploited without user interaction and can lead to local denial of service.
5
How can I fix CVE-2023-21253?
To fix CVE-2023-21253, it is recommended to apply the patches or updates provided by Google.