CVE-2023-21171

In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-261085213

• https://source.android.com/security/bulletin/pixel/2023-06-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2023-06-01Vendor Advisory

Published

Jun 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-21166In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbi…9.8
• CVE-2023-21167In setProfileName of DevicePolicyManagerService.java, there …5.5
• CVE-2023-21168In convertCbYCrY of ColorConverter.cpp, there is a possible …5.5
• CVE-2023-21169In inviteInternal of p2p_iface.cpp, there is a possible out …4.4
• CVE-2023-2117The Image Optimizer by 10web WordPress plugin before 1.0.27 …2.7
• CVE-2023-21170In executeSetClientTarget of ComposerCommandEngine.h, there …4.4
• CVE-2023-21172In multiple functions of WifiCallingSettings.java, there is …7.8
• CVE-2023-21173In multiple methods of DataUsageList.java, there is a possib…5.5
• CVE-2023-21174In isPageSearchEnabled of BillingCycleSettings.java, there i…7.8
• CVE-2023-21175In onCreate of DataUsageSummary.java, there is a possible me…7.8
• CVE-2023-21176In list_key_entries of utils.rs, there is a possible way to …4.4
• CVE-2023-21177In requestAppKeyboardShortcuts of WindowManagerService.java,…5.5