{"id":"CVE-2023-21220","aliases":["A-264590585","EUVD-2023-25388","GHSA-4497-w4wq-c9hv","PUB-A-264590585"],"status":"published","title":"there is a possible use of unencrypted transport over cellular networks due to an insecure...","description":"there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264590585References: N/A","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0032,"percentile":0.2519,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-319"],"published":"2023-06-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["Pixel-family specific:2023-06-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"Pixel-family specific:0"},{"fixed":"Pixel-family specific:2023-06-05"}]}],"versions":["Pixel-family specific"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2023-06-01","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21220"},{"url":"https://github.com/advisories/GHSA-4497-w4wq-c9hv"},{"url":"https://source.android.com/security/bulletin/2023-06-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-21220","description":"there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264590585References: N/A","status":"published","published":"2023-06-28T00:00:00Z","modified":"2024-12-03T19:30:34.026Z","updated_at":"2026-11-02T14:35:19.959682Z"}],"euvd":[{"id":"EUVD-2023-25388","description":"there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264590585References: N/A","status":"published","published":"2023-06-28T00:00:00Z","modified":"2024-12-03T19:30:34Z","updated_at":"2026-11-03T00:04:41.773585Z"}],"ghsa":[{"id":"GHSA-4497-w4wq-c9hv","title":"there is a possible use of unencrypted transport over cellular networks due to an insecure...","description":"there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264590585References: N/A","status":"published","published":"2023-06-28T18:30:26Z","modified":"2024-04-04T05:15:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:56:31.130891Z"}],"nvd":[{"id":"CVE-2023-21220","description":"there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264590585References: N/A","status":"published","published":"2023-06-28T18:15:16.25Z","modified":"2026-06-17T05:32:06.533Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:08:14.715708Z"}],"osv":[{"id":"PUB-A-264590585","description":"there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-06-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-09T17:05:56.917158Z"}]}}