CVE-2023-21230

In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and…

published August 14, 2023

CVSS
—
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and its BSSID or SSID due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00087 · 0.3th percentile
Published
2023-08-14T21:10Z
EPSS history
Timeline
  • 14 AUG 21:10Z
    In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and…
    cvelistv5