CVE-2023-21374: High severity android vulnerability

Published Oct 30, 2023

Updated

In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected component

Google Android=14.0

Event History

Oct 30, 2023

CVE Published

05:01 PM

Data Sourced

05:01 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-21374?

CVE-2023-21374 is a vulnerability in the System UI of Google Android 14.0 that allows a factory reset protection bypass, leading to local escalation of privilege without requiring additional execution privileges or user interaction.

How severe is CVE-2023-21374?

CVE-2023-21374 has a severity rating of 7.8, which is considered high.

Is user interaction required to exploit CVE-2023-21374?

No, user interaction is not needed for exploitation of CVE-2023-21374.

What is the affected software for CVE-2023-21374?

The affected software for CVE-2023-21374 is Google Android 14.0.

How can I fix CVE-2023-21374?

To fix CVE-2023-21374, it is recommended to apply the security patch provided by Google for Android 14.0.