In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
|
No data.
No data.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 30 Sep 2025 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* |
Thu, 04 Sep 2025 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 04 Sep 2025 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In Speech, there is a possible way to bypass background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
| References |
|
MITRE
Status: PUBLISHED
Assigner: google_android
Published:
Updated: 2025-09-04T17:11:35.979Z
Reserved: 2022-11-03T22:37:50.661Z
Link: CVE-2023-21342
Vulnrichment
Updated: 2024-08-02T09:36:33.277Z
NVD
Status : Analyzed
Published: 2023-10-30T17:15:50.147
Modified: 2025-09-30T15:41:54.473
Link: CVE-2023-21342
Redhat
No data.
OpenCVE Enrichment
No data.