CVE-2023-21132

Summary

CVE-2023-21132 is a vulnerability affecting the onCreate function of ManagePermissionsActivity.java. This issue allows for bypassing factory reset protections without user interaction or additional execution privileges, making it possible for local privilege escalation upon physical access to a device that has been factory reset. The missing permission check in the affected function is the root cause of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.