CVE-2023-21641: Permissions, Privileges, and Access Controls in Display
An app with non-privileged access can change global system brightness and cause undesired system behavior.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/frameworks/nativeto a version that resolves this vulnerability.Fixed in SoCVersion:2023-07-05
Event History
Frequently Asked Questions
What is CVE-2023-21641?
CVE-2023-21641 is a vulnerability that allows an app with non-privileged access to change the global system brightness and cause undesired system behavior.
Which software is affected by CVE-2023-21641?
CVE-2023-21641 affects Qualcomm Fastconnect 6900 Firmware, Qualcomm Fastconnect 7800 Firmware, Qualcomm Qca6574au Firmware, Qualcomm Qca6696 Firmware, Qualcomm Sa6145p Firmware, Qualcomm Sa6150p Firmware, Qualcomm Sa6155p Firmware, Qualcomm Sa8145p Firmware, Qualcomm Sa8150p Firmware, Qualcomm Sa8155p Firmware, Qualcomm Sa8195p Firmware, Qualcomm Snapdragon 8 Gen 1 Firmware, Qualcomm Wcd9380 Firmware, Qualcomm Wsa8830 Firmware, and Qualcomm Wsa8835 Firmware.
What is the severity of CVE-2023-21641?
The severity of CVE-2023-21641 is high with a CVSS score of 7.8.
How can I fix CVE-2023-21641?
To fix CVE-2023-21641, apply the necessary security patches provided by Qualcomm.
Where can I find more information about CVE-2023-21641?
You can find more information about CVE-2023-21641 on the official Qualcomm website: [link](https://www.qualcomm.com/company/product-security/bulletins/july-2023-bulletin).