CVE-2023-21091 is a medium-severity vulnerability affecting Android 13, stemming from a missing permission check in the AppLocalePickerActivity.java component. This flaw allows an attacker to cause a local denial of service across user boundaries without requiring user interaction or elevated privileges. While the CVSS score is 5.5, indicating a moderate risk, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
13.0CPE matchmatch criteria | cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.