CVE-2023-21291: Medium severity Google Android vulnerability
In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-21291?
CVE-2023-21291 is a vulnerability found in the visitUris function of the Notification.java file in Google Android.
What is the severity of CVE-2023-21291?
CVE-2023-21291 is classified as a high severity vulnerability with a severity value of 7.
How can CVE-2023-21291 be exploited?
CVE-2023-21291 can be exploited by an attacker with local execution privileges without requiring user interaction.
What is the potential impact of CVE-2023-21291?
CVE-2023-21291 could allow an attacker to reveal image contents from another user, leading to local information disclosure.
How can I fix CVE-2023-21291?
To fix CVE-2023-21291, it is recommended to apply the necessary security patches provided by Google for the affected Android devices.