CVE-2023-20602: Integer Overflow
In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-02-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS07494107
Event History
Frequently Asked Questions
What is CVE-2023-20602?
CVE-2023-20602 is a vulnerability in ged that allows for an out-of-bounds write due to an integer overflow.
What software is affected by CVE-2023-20602?
The affected software includes Google Android versions 10.0, 11.0, 12.0, and 13.0.
What is the severity of CVE-2023-20602?
CVE-2023-20602 has a severity rating of 6.7 (high).
How can CVE-2023-20602 be exploited?
Exploitation of CVE-2023-20602 does not require user interaction and can lead to local escalation of privilege with system execution privileges.
How can I mitigate CVE-2023-20602?
To mitigate CVE-2023-20602, apply the corresponding patch provided by the vendor.