CVE-2023-21190

Summary

CVE-2023-21190 is a vulnerability affecting the Android operating system, specifically in the btm_acl.cc file within the btm_acl_encrypt_change function. The issue allows a remote device to disable encryption without causing a terminated connection, potentially leading to local information disclosure. No additional execution privileges are required for exploitation, but user interaction is needed. This vulnerability, identified as A-251436534, could pose a significant security risk on Android-13 platforms.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.