VYPR
← All advisories
High severity7.8NVD Advisory· Published Nov 19, 2024· Updated Jun 17, 2026

CVE-2023-21270

CVE-2023-21270

Description

In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions that should be revoked due to incorrect permission flags cleared during an update. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Google/Android3 versions
    cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
  • Android X86/android-x86llm-fuzzy
  • Google/Andrioidv5
    Range: sc-dev

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.