Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-21143: Google Android framework can cause device crash

CVE-2023-21143 · published 3 years ago

Summary

Certain parts of the Android system software may mishandle unexpected input, allowing the device to become unresponsive without needing any user action or special permissions. This results in a local denial of service where the device stops working until it is restarted. Install the latest Android security updates from Google to fix the issue.

What to do

Update google platform/frameworks/base to version 13-next:2023-06-01.
Update google platform/frameworks/base to version 11:2023-06-01.
Update google platform/frameworks/base to version 12:2023-06-01.
Update google platform/frameworks/base to version 12L:2023-06-01.
Update google platform/frameworks/base to version 13:2023-06-01.

Affected software

Ecosystem	Vendor	Product	Affected versions
Android	google	platform/frameworks/base	>= 13-next:0, < 13-next:2023-06-01 >= 11:0, < 11:2023-06-01 >= 12:0, < 12:2023-06-01 >= 12L:0, < 12L:2023-06-01 >= 13:0, < 13:2023-06-01 Fix: upgrade to 13-next:2023-06-01
–	google	android	11.0 12.0 12.1 13.0 `cpe:2.3:o:google:android:11.0:::::::*`

Original advisory text

In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input validation. This could lead to local denial of service with no additional executio...

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-20Improper Input Validation

CWE-120Classic Buffer Overflow

Timeline

Published1 Jun 2023

Updated30 Sep 2026

First seen10 Sep 2026

Sources

ASB-A-268193777 · OSV

CVE-2023-21143 · NVD

Track software like this

Free during beta