VULNERABILITY INTELLIGENCE
CVE-2023-21103
CVSS score5.5 MEDIUM
EPSS probability0.10%
CISA KEVNot currently listed
Published2023-05-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-259064622
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-209
Primary references
- security@android.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory