CVE-2023-21134

Summary

CVE-2023-21134 is a vulnerability affecting the onCreate function in ManagePermissionsActivity.java. This issue allows an attacker with physical access to a device that has undergone a factory reset to bypass factory reset protections. The bypass occurs due to a missing permission check, granting local escalation of privilege without requiring any additional execution privileges or user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.