CVE-2023-21270

Summary

CVE-2023-21270 is a vulnerability affecting the PermissionManagerServiceImpl.java in Android's operating system. It allows an app to bypass the revocation of permissions during an update, potentially granting the app elevated privileges. This issue does not require user interaction for exploitation and could result in local escalation of privilege. Incorrect handling of permission flags during the restore process has been identified as the root cause.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.