CVE-2023-21325
https://notcve.org/view.php?id=CVE-2023-21325
In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. • https://source.android.com/docs/security/bulletin/android-14 • CWE-203: Observable Discrepancy •
CVE-2023-21324
https://notcve.org/view.php?id=CVE-2023-21324
In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. • https://source.android.com/docs/security/bulletin/android-14 • CWE-203: Observable Discrepancy •
CVE-2023-21323
https://notcve.org/view.php?id=CVE-2023-21323
In Activity Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. • https://source.android.com/docs/security/bulletin/android-14 • CWE-203: Observable Discrepancy •
CVE-2023-21321
https://notcve.org/view.php?id=CVE-2023-21321
This could lead to local information disclosure with no additional execution privileges needed. • https://source.android.com/docs/security/bulletin/android-14 • CWE-862: Missing Authorization •
CVE-2023-21320
https://notcve.org/view.php?id=CVE-2023-21320
In Device Policy, there is a possible way to verify if a particular admin app is registered on the device due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. • https://source.android.com/docs/security/bulletin/android-14 • CWE-203: Observable Discrepancy •