CVE-2023-20653: Medium severity Google Android vulnerability
In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628168; Issue ID: ALPS07589144.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-04-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS07628168
Event History
Frequently Asked Questions
What is the severity of CVE-2023-20653?
The severity of CVE-2023-20653 is high, with a CVSS score of 6.7.
What is the affected software for CVE-2023-20653?
The affected software for CVE-2023-20653 includes Google Android versions 10.0, 11.0, 12.0, and 13.0.
Is user interaction needed for exploitation of CVE-2023-20653?
No, user interaction is not needed for exploitation of CVE-2023-20653.
How can I patch CVE-2023-20653?
To patch CVE-2023-20653, you can refer to the patch ID ALPS07628168 and the issue ID ALPS07589144.
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-20653?
The CWE ID for CVE-2023-20653 is CWE-787.