CVE-2023-20655: High severity Google Android vulnerability
In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203022; Issue ID: ALPS07203022.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-04-05 - Upgrade
Upgrade
mmsdkto a version that resolves this vulnerability.Patch ALPS07203022
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-20655.
What is the severity of CVE-2023-20655?
The severity of CVE-2023-20655 is high with a CVSS score of 7.8.
How can this vulnerability be exploited?
This vulnerability can be exploited by an attacker with local access to execute code without additional privileges.
Which software versions are affected by this vulnerability?
The affected software versions are Google Android 10.0, 11.0, 12.0, and 13.0.
How can I fix CVE-2023-20655?
To fix CVE-2023-20655, apply the patch ID ALPS07203022 provided by Google Android.