VYPR
Unrated severityCISA KEVNVD Advisory· Published Jun 28, 2023· Updated Oct 21, 2025

CVE-2023-21237

CVE-2023-21237

Description

In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912

Affected products

1
  • Android/Androiddescription

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.