How severe is CVE-2023-21111?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.2 out of 10.

What type of vulnerability is CVE-2023-21111?

This is classified as CWE-20, which is a common weakness in software security.

CVE-2023-21111 - MEDIUM Severity | CVSS 6.2

Vulnerability Description

In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-256819769

Related Vulnerabilities

CVE-2016-2414

MEDIUM

CVSS:6.2(Medium)

The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in font data, which allows remote attackers to cause a ...

CWE-202016

CVE-2016-2548

MEDIUM

CVSS:6.2(Medium)

sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service (system crash) via a crafted ioctl ...

CWE-202016

CVE-2016-2549

MEDIUM

CVSS:6.2(Medium)

sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service (deadlock) via a crafted ioctl call.

CWE-202016

CVE-2016-4701

MEDIUM

CVSS:6.2(Medium)

Application Firewall in Apple OS X before 10.12 allows local users to cause a denial of service via vectors involving a crafted SO_EXECPATH environment variable.

CWE-202016

CVE-2016-6259

MEDIUM

CVSS:6.2(Medium)

Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial o...

CWE-202016

CVE-2017-15707

MEDIUM

CVSS:6.2(Medium)

In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.

CWE-202017