CVE-2023-20632: Medium severity android vulnerability
In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628506; Issue ID: ALPS07628506.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-20632?
CVE-2023-20632 is a vulnerability in usb where there is a possible out of bounds write due to a missing bounds check, which could lead to local escalation of privilege with system execution privileges needed.
What is the severity of CVE-2023-20632?
The severity of CVE-2023-20632 is medium with a CVSS score of 6.7.
How can the CVE-2023-20632 vulnerability be exploited?
Exploiting CVE-2023-20632 does not require user interaction and can be exploited without any user action.
Which software versions are affected by CVE-2023-20632?
CVE-2023-20632 affects Google Android versions 11.0, 12.0, and 13.0.
How can I fix CVE-2023-20632?
To fix CVE-2023-20632, apply the corresponding patch with ID ALPS07628506 provided by the vendor.