CVE-2023-21290

In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition

published August 14, 2023

CVSS
—
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00073 · 0.1th percentile
Published
2023-08-14T21:07Z
EPSS history
Timeline
  • 14 AUG 21:07Z
    In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition
    cvelistv5