In Overlay Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://source.android.com/docs/security/bulletin/android-14 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2023-10-30T16:56:32.976Z
Updated: 2024-09-06T19:58:52.460Z
Reserved: 2022-11-03T22:37:50.661Z
Link: CVE-2023-21330
Vulnrichment
Updated: 2024-08-02T09:36:33.269Z
NVD
Status : Analyzed
Published: 2023-10-30T17:15:49.240
Modified: 2023-11-07T00:45:54.980
Link: CVE-2023-21330
Redhat
No data.