CVE-2023-21035

CVE-2023-21035 is a local privilege escalation vulnerability affecting Android 13. It allows a malicious application to bypass permission checks in the BackupHelper.java component, thereby gaining permissions previously granted to another application with the same package name. This high-severity vulnerability (CVSS 7.8) requires no user interaction or additional execution privileges for exploitation, leading to potential complete compromise of confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.