CVE-2023-21344

In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

• CWE-203

• https://source.android.com/docs/security/bulletin/android-14Release Notes, Vendor Advisory
• https://source.android.com/docs/security/bulletin/android-14Release Notes, Vendor Advisory

Published

Oct 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-21339In Minikin, there is a possible way to trigger ANR by showin…7.5
• CVE-2023-2134Out of bounds memory access in Service Worker API in Google …8.8
• CVE-2023-21340In Telecomm, there is a possible way to get the call state d…5.5
• CVE-2023-21341In Permission Manager, there is a possible way to bypass req…7.8
• CVE-2023-21342In RemoteSpeechRecognitionService of RemoteSpeechRecognition…7.8
• CVE-2023-21343In ActivityStarter, there is a possible background activity …7.8
• CVE-2023-21345In Game Manager Service, there is a possible way to determin…3.3
• CVE-2023-21346In the Device Idle Controller, there is a possible way to de…3.3
• CVE-2023-21347In Bluetooth, there is a possible out of bounds read due to …7.5
• CVE-2023-21348In Window Manager, there is a possible way to determine whet…3.3
• CVE-2023-21349In Package Manager, there is a possible way to determine whe…3.3
• CVE-2023-2135Use after free in DevTools in Google Chrome prior to 112.0.5…7.5