CVE-2023-21281

In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.20% chance of exploitation in the next 30 days, 10th percentile

Published

2023-08-14

Updated

2024-10-09

Proof-of-concept exploits (1)

• Trinadh465/platform_frameworks_base_CVE-2023-212810★ · 2023-10-03

References

• CVE Record
• NVD entry

Related

• CVE-2023-21275
• CVE-2023-21282
• CVE-2023-21272
• CVE-2023-21284
• CVE-2023-21251
• CVE-2023-21286