7.3
Élevée
CVE-2023-20976 In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default…
Description
In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-216117246
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Android | Versions non publiées |
Autres CVE de Android
Les 2441 CVE de Android →
CVE-2023-21169
In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check
Non notée
CVE-2023-21170
In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds…
Non notée
CVE-2023-21168
In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check
Non notée
CVE-2023-21167
In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a…
Non notée