Unrated severityNVD Advisory· Published Mar 24, 2023· Updated Feb 25, 2025
CVE-2023-21026
CVE-2023-21026
Description
In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own SurfaceControl due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-254681548
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 13
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.