CVE-2023-21387

—

CVSS 3.1

4.4 medium

EPSS

<1%p1

Published

Oct 30, 2023 (Oct 30, 2023)

Modified

Jun 17, 2026

Description

In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Vendors: google
Products: android
Weakness: CWE-532
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.