CVE Database
/

CVE-2023-21243

Back to search

CVE-2023-21243

Published: Jul 12, 2023

Modified: Nov 6, 2024

PUBLISHED

Description

In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

VendorProductVersions

Google

Android

affected
13
affected
12L
affected
12
affected
11

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now