Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-21094. PoCs published by Trinadh465.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2023-21094, targeting a vulnerability in Android's frameworks/native component. The exploit appears to focus on the atrace, bugreport, and dumpstate utilities, likely leveraging improper input validation or privilege escalation.
Description
In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-248031255
Exploits (1)
This repository contains a proof-of-concept exploit for CVE-2023-21094, targeting a vulnerability in Android's frameworks/native component. The exploit appears to focus on the atrace, bugreport, and dumpstate utilities, likely leveraging improper input validation or privilege escalation.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H