CVE-2023-21170

Summary

CVE-2023-21170 is a vulnerability affecting the ComposerCommandEngine.h component in Android OS. The issue stems from a missing bounds check in the executeSetClientTarget function, which could result in an out-of-bounds read. This vulnerability holds the potential for local information disclosure and even system execution, without requiring user interaction. The affected product is Android, and versions 13 are specifically targeted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.