CVE-2023-21184

Summary

CVE-2023-21184 is a vulnerability affecting the Android operating system. In the getCurrentPrivilegedPackagesForAllUsers function of CarrierPrivilegesTracker.java, a logic error exists, allowing for potential permission bypass. This issue permits local privilege escalation without requiring additional execution privileges or user interaction. The vulnerability affects Android-13, and its identification number is A-267809568.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.