CVE-2023-21214

Summary

CVE-2023-21214 is a vulnerability affecting the Android operating system. In the function "addGroupWithConfigInternal" of "p2p_iface.cpp," there is a risk of out-of-bounds read due to insecure deserialization. This security flaw could potentially result in local information disclosure, requiring System execution privileges for exploitation. Notably, user interaction is not a prerequisite for an attacker to exploit this vulnerability. The affected product versions are Android-13, and the issue has been assigned the Android ID A-262235736.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.