CVE-2023-21353: High severity android vulnerability
Published Oct 30, 2023
·Updated
In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
1 affected component
Google Android=14.0
Event History
Oct 30, 2023
CVE Published
04:56 PM
Data Sourced
04:56 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2023-21353?
CVE-2023-21353 is a vulnerability in NFA that allows remote information disclosure due to a missing bounds check.
2
How severe is CVE-2023-21353?
CVE-2023-21353 is considered high severity with a CVSS score of 7.5.
3
How does CVE-2023-21353 affect Google Android 14.0?
CVE-2023-21353 affects Google Android 14.0 and could lead to remote information disclosure with no additional execution privileges needed.
4
Is user interaction required for exploitation of CVE-2023-21353?
No, user interaction is not needed for exploitation of CVE-2023-21353.
5
How can I fix CVE-2023-21353?
To fix CVE-2023-21353, it is recommended to apply the latest security patch from Google Android.