CVE-2023-21205

Summary

CVE-2023-21205 is a vulnerability affecting the Android operating system. In the code of sta_iface.cpp's startWpsPinDisplayInternal function, there is a potential out-of-bounds read occurrence due to insecure deserialization. This issue can result in local information disclosure, requiring no extra execution privileges. user interaction is not necessary for an attacker to exploit this vulnerability. The affected product versions are Android-13, and the vulnerability has been assigned the ID A-262245376.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.