CVE-2023-21103

EPSS 0.03%
Veröffentlicht 15.05.2023 22:15:11
Zuletzt bearbeitet 24.01.2025 18:15:30
Quelle security@android.com
CVE-Watchlists
Login
Unerledigt
Login

In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-259064622

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version11.0

Google ≫ Android Version12.0

Google ≫ Android Version12.1

Google ≫ Android Version13.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.082

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-209 Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

https://source.android.com/security/bulletin/2023-05-01

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-21103

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-21103

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-21103

EUVD