CVE-2021-23243

CVE-2021-23243 describes a high-severity vulnerability (CVSS 7.8) in Oppo's battery application, where a third-party SDK allows loading of an unverified third-party Provider, potentially leading to full compromise of confidentiality, integrity, and availability. This local vulnerability requires low privileges and no user interaction, making it relatively easy to exploit once an attacker gains initial access. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat landscape.