CVE-2023-21171

In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure

published June 28, 2023

CVSS
—
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261085213

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00096 · 0.7th percentile
Published
2023-06-28T00:00Z
EPSS history
Timeline
  • 28 JUN 00:00Z
    In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure
    cvelistv5