Unscored CVE-2023-21240 EUVD-2023-25408GHSA-672c-38pw-m2m5

In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no addi…

Published Jul 12, 2023 · Updated Nov 6, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	13, 12L, 12, 11	—

Advisories 2

WID-SEC-2023-1669 Android Patchday Juli 2023 BSI CERT-Bund (WID) · Sep 6, 2023
WID-SEC-2023-1672 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 5, 2023

References

https://android.googlesource.com/platform/packages/modules/Wifi/+/69119d1d3102e27b6473c785125696881bce9563
https://source.android.com/security/bulletin/2023-07-01