CVE-2023-40121

Published: Oct 27, 2023

Modified: Sep 9, 2024

PUBLISHED

Description

In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

Vendor	Product	Versions
Google	Android	affected `13` affected `12L` affected `12` affected `11`

References

https://android.googlesource.com/platform/frameworks/base/+/3287ac2d2565dc96bf6177967f8e3aed33954253

https://source.android.com/security/bulletin/2023-10-01

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-40121

Description

Affected Products

References