CVEvulnerability

CVE-2023-21364

5.5 MEDIUM Published 2023-10-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

In ContactsProvider, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User execution privileges needed. User interaction is not needed for exploitation.

Affected configurations

• google android (< 14.0) • google android 14.0

References