CoreCVE
Back

HIGH

In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary account due to a permissions bypass

Published Apr 19, 2023

Description

In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary account due to a permissions bypass. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-238298970

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner google_android
Published Apr 19, 2023
Updated Feb 5, 2025
Reserved Nov 3, 2022
Link CVE-2023-21086
CISA Vulnrichment
Updated Feb 5, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-21086
Red Hat
Severity n/a
Public date n/a
Links CVE-2023-21086
ENISA EUVD
Assigner google_android
Published Apr 19, 2023
Updated Feb 5, 2025
Exploited since n/a
Link EUVD-2023-25254
EUVD-2023-25254