CVE-2023-21253

In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

• CWE-400

• https://android.googlesource.com/platform/frameworks/base/+/84df68840b6f2407146e722ebd95a7d8bc6e3529Mailing List, Patch
• https://android.googlesource.com/platform/tools/apksig/+/039f815895f62c9f8af23df66622b66246f3f61eMailing List, Patch
• https://android.googlesource.com/platform/tools/apksig/+/41d882324288085fd32ae0bb70dc85f5fd0e2be7Mailing List, Patch
• https://source.android.com/security/bulletin/2023-10-01Patch, Vendor Advisory
• https://android.googlesource.com/platform/frameworks/base/+/84df68840b6f2407146e722ebd95a7d8bc6e3529Mailing List, Patch
• https://android.googlesource.com/platform/tools/apksig/+/039f815895f62c9f8af23df66622b66246f3f61eMailing List, Patch
• https://android.googlesource.com/platform/tools/apksig/+/41d882324288085fd32ae0bb70dc85f5fd0e2be7Mailing List, Patch
• https://source.android.com/security/bulletin/2023-10-01Patch, Vendor Advisory

Published

Oct 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-21247In getAvailabilityStatus of BluetoothScanningMainSwitchPrefe…7.8
• CVE-2023-21248In getAvailabilityStatus of WifiScanningMainSwitchPreference…7.8
• CVE-2023-21249In multiple functions of OneTimePermissionUserManager.java, …5.5
• CVE-2023-21250In gatt_end_operation of gatt_utils.cc, there is a possible …9.8
• CVE-2023-21251In onCreate of ConfirmDialog.java, there is a possible way t…7.3
• CVE-2023-21252In validatePassword of WifiConfigurationUtil.java, there is …5.5
• CVE-2023-21254In getCurrentState of OneTimePermissionUserManager.java, the…7.8
• CVE-2023-21255In multiple functions of binder.c, there is a possible memor…7.8
• CVE-2023-21256In SettingsHomepageActivity.java, there is a possible way to…7.8
• CVE-2023-21257In updateSettingsInternalLI of InstallPackageHelper.java, th…7.8
• CVE-2023-21260In notification access permission dialog box, malicious appl…5.5
• CVE-2023-21261Rejected reason: This CVE ID has been rejected or withdrawn …