CVE-2023-21392

In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege when connecting to a Bluetooth device with no additional execution privileges needed. User interaction is not needed for exploitation.

• CWE-416

• https://source.android.com/docs/security/bulletin/android-14Release Notes, Vendor Advisory
• https://source.android.com/docs/security/bulletin/android-14Release Notes, Vendor Advisory

Published

Oct 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-21387In User Backup Manager, there is a possible way to leak a to…4.4
• CVE-2023-21388In Settings, there is a possible restriction bypass due to a…7.8
• CVE-2023-21389In Settings, there is a possible bypass of profile owner res…7.8
• CVE-2023-2139 A reflected Cross-site Scripting (XSS) Vulnerability in DEL…6.1
• CVE-2023-21390In Sim, there is a possible way to evade mobile preference r…7.8
• CVE-2023-21391In Messaging, there is a possible way to disable the messagi…7.5
• CVE-2023-21393In Settings, there is a possible way for the user to change …7.8
• CVE-2023-21394In registerPhoneAccount of TelecomServiceImpl.java, there is…5.5
• CVE-2023-21395In Bluetooth, there is a possible out of bounds read due to …6.5
• CVE-2023-21396In Activity Manager, there is a possible background activity…7.8
• CVE-2023-21397In Setup Wizard, there is a possible way to save a WiFi netw…7.8
• CVE-2023-21398In sdksandbox, there is a possible strandhogg style overlay …7.8