CVE-2023-21237

In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912

• CWE-200

• https://source.android.com/security/bulletin/pixel/2023-06-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2023-06-01Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21237Third Party Advisory, US Government Resource

Published

Jun 28, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-21231In getIntentForButton of ButtonManager.java, there is a poss…7.8
• CVE-2023-21232In multiple locations, there is a possible way to retrieve s…3.3
• CVE-2023-21233In multiple locations of avrc, there is a possible leak of h…7.5
• CVE-2023-21234In launchConfirmationActivity of ChooseLockSettingsHelper.ja…5.5
• CVE-2023-21235In onCreate of LockSettingsActivity.java, there is a possibl…7.8
• CVE-2023-21236In aoc_service_set_read_blocked of aoc.c, there is a possibl…6.7
• CVE-2023-21238In visitUris of RemoteViews.java, there is a possible leak o…5.5
• CVE-2023-21239In visitUris of Notification.java, there is a possible way t…5.5
• CVE-2023-2124An out-of-bounds memory access flaw was found in the Linux k…7.8
• CVE-2023-21240In Policy of Policy.java, there is a possible boot loop due …5.5
• CVE-2023-21241In rw_i93_send_to_upper of rw_i93.cc, there is a possible ou…7.8
• CVE-2023-21242In isServerCertChainValid of InsecureEapNetworkHandler.java,…9.8