CVE-2023-20620: Medium severity Google Android vulnerability

Published Mar 6, 2023

Updated

In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07554558; Issue ID: ALPS07554558.

Affected Software

6 affected components

Google Android=12.0

Google Android=13.0

MediaTek Mt6879

MediaTek Mt6895

MediaTek Mt6983

Google Android

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS07554558

Event History

Mar 6, 2023

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Mar 7, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2023-20620?

CVE-2023-20620 has been classified as a high severity vulnerability due to the potential for local escalation of privileges.

How do I fix CVE-2023-20620?

To fix CVE-2023-20620, apply the patch identified as ALPS07554558 provided by the vendor.

Which versions of Android are affected by CVE-2023-20620?

CVE-2023-20620 affects Android versions 12.0 and 13.0.

Is user interaction required to exploit CVE-2023-20620?

No, user interaction is not needed for the exploitation of CVE-2023-20620.

What type of vulnerability is CVE-2023-20620?

CVE-2023-20620 is a logic error vulnerability that allows for escalation of privilege.