CVE-2023-21178

Summary

CVE-2023-21178 is a vulnerability affecting Android's KeyUtil.cpp in the installKey function. This issue results in a potential failure of file encryption due to a race condition. With System execution privileges, an attacker could exploit this vulnerability to disclose local information without requiring user interaction. This flaw impacts Android-13 and requires further investigation for potential mitigations or patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.